anthropics/claude-code-action vulnerabilities

CVEs whose affected-version data names the anthropics/claude-code-action package (actions). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-47751Medium

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

▾ Sunlitanthropics · anthropics/claude-code-actionEPSS 0.77%via GHSA

anthropics/claude-code-action vulnerabilities (CVEs) · VulnSea