p PatchFirst

PatchFirst · Latest vulnerabilities

@anthropic-ai/sandbox-runtime vulnerabilities

Vulnerabilities published for @anthropic-ai/sandbox-runtime in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-66479

    Low · CVSS 1.8EPSS 0.16%Fix available

    Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

    Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16.

    @anthropic-ai/sandbox-runtimeNode.js
    • Update to 0.0.16
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →