{"id":"EUVD-2025-198179","enisaUuid":"81bf75d0-8bac-374f-ade6-87e112a098e4","description":"Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have been tricked to execute code contained in a project via yarn plugins before the user accepted the startup trust dialog. Exploiting this would have required a user to start Claude Code in an untrusted directory and to be using Yarn 3.0 or above. This issue has been patched in version 1.0.39.","datePublished":"Nov 19, 2025, 5:35:17 PM","dateUpdated":"Nov 20, 2025, 2:20:44 PM","baseScore":7.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-5hhx-v7f6-x7gv\n","aliases":"CVE-2025-65099\nGHSA-5hhx-v7f6-x7gv\n","assigner":"GitHub_M","epss":0.55,"enisaIdProduct":[{"id":"5375663a-0b82-3abe-a3b0-c406157c94fe","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 1.0.39"}],"enisaIdVendor":[{"id":"d9dd3369-ec8b-353c-94fd-e0b9937a93e2","vendor":{"name":"anthropics"}}],"enisaIdVulnerability":[{"id":"b3ecb006-8574-30eb-8b34-4af981ad098c","vulnerability":{"id":"CVE-2025-65099","description":"Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude Code could have been tricked to execute code contained in a project via yarn plugins before the user accepted the startup trust dialog. Exploiting this would have required a user to start Claude Code in an untrusted directory and to be using Yarn 3.0 or above. This issue has been patched in version 1.0.39.","datePublished":"Nov 19, 2025, 5:35:17 PM","dateUpdated":"Nov 20, 2025, 2:20:44 PM","status":"PUBLISHED","baseScore":7.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-5hhx-v7f6-x7gv\n","enisa_id":"EUVD-2025-198179\n","assigner":"GitHub_M","epss":0.55,"dataProcessed":"Nov 2, 2026, 7:20:36 AM","vulnerabilityProduct":[{"id":"b32c0725-4307-3f8c-846f-c6341ab1a2fa","product":{"name":"claude-code","vendor":{"name":"anthropics"}},"product_version":"\u003c 1.0.39"}],"vulnerabilityVendor":[{"id":"aca6bcc1-29e5-3494-b623-f7dcdc1598d5","vendor":{"name":"anthropics"}}]}},{"id":"eb1d1e08-c896-34f2-bfa9-0e416df7c00f","vulnerability":{"id":"GHSA-5hhx-v7f6-x7gv","description":"Claude Code vulnerable to command execution prior to startup trust dialog","datePublished":"Nov 19, 2025, 8:33:10 PM","dateUpdated":"Dec 22, 2025, 4:31:15 PM","baseScore":0.0,"references":"https://github.com/anthropics/claude-code/security/advisories/GHSA-5hhx-v7f6-x7gv\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-65099\nhttps://github.com/anthropics/claude-code\n","enisa_id":"EUVD-2025-198179\n","aliases":"CVE-2025-65099\nGHSA-5hhx-v7f6-x7gv\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:19 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}