A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other secrets, according to findings by GitGuardian. The code security firm identified 31,088 distinct secrets in Claude Code’s “.claude/settings.local.json” files across 23,276 public GitHub... Weiterlesen: Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem
Intelligence View
⚡ tsecurity.de Intelligence
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem
A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other s…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Diese Meldung in anderen Quellen
Verwandte Story-Cluster & Quellen (Vektor-KI)
18 Quellen
USN-9044-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
17 weitere Quellen
UUbuntu security noticesvor 3 Std.USN-9045-1: Linux kernel (NVIDIA) vulnerability UUbuntu security noticesvor 3 Std.USN-9043-1: Linux kernel (NVIDIA) vulnerabilities VVulDB Updatesvor 3 Std.CVE-2025-39691 | Linux Kernel up to 6.17-rc2 bh_read use after free (Nessus ID 261595 / WID-SEC-2025-1988) VVulDB Updatesvor 3 Std.CVE-2025-38736 | Linux Kernel up to a754ab53993b1585132e871c5d811167ad3c52ff net asix_devices initialization (Nessus ID 261652 / WID-SEC-2025-1988) VVulDB Updatesvor 2 Std.CVE-2025-39866 | Linux Kernel up to 6.17-rc2 fs __mark_inode_dirty use after free (EUVD-2025-30334 / Nessus ID 265477) VVulDB Updatesvor 2 Std.CVE-2025-39826 | Linux Kernel up to 6.17-rc3 net rose_rt_ioctl reference count (Nessus ID 265277 / WID-SEC-2025-2077)
+11
13 Quellen
CVE-2026-125878 | N-able N-central up to 26.4.0 cross site scripting (WID-SEC-2026-4440)
12 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-125879 | N-able N-central up to 26.4.0 privileges management (WID-SEC-2026-4440) VVulDB Updatesvor 4 Std.CVE-2026-125880 | N-able N-central up to 26.4.0 cross site scripting (WID-SEC-2026-4440) VVulDB Updatesvor 4 Std.CVE-2026-125881 | N-able N-central up to 26.4.0 server-side request forgery (WID-SEC-2026-4440) VVulDB Updatesvor 4 Std.CVE-2026-125882 | N-able N-central up to 26.4.0 path traversal (WID-SEC-2026-4440) VVulDB Updatesvor 3 Std.CVE-2026-124250 | AyeCode GeoDirectory Plugin up to 2.8.202 on WordPress cross site scripting (EUVD-2026-123347) VVulDB Updatesvor 3 Std.CVE-2026-124256 | CodeRockz Delivery & Pickup Date Time Plugin up to 1.3.90 on WordPress cross site scripting (EUVD-2026-123340)
+6
12 Quellen
CVE-2026-126626 | Progressive Robot hMailServer up to 6.3.7 Web Services Listener allocation of resources (EUVD-2026-123338)
11 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-126621 | Progressive Robot hMailServer up to 6.3.7 TLS File certificate validation (EUVD-2026-123337) VVulDB Updatesvor 4 Std.CVE-2026-126625 | Progressive Robot hMailServer 6.3.7 Windows Installer privileges management (EUVD-2026-123330) VVulDB Updatesvor 4 Std.CVE-2026-126616 | Progressive Robot hMailServer up to 6.3.3 Auto-ban improper authentication (EUVD-2026-123333) VVulDB Updatesvor 4 Std.CVE-2026-126617 | Progressive Robot hMailServer up to 6.2.18 Database Layer GenerateFromCommand sql injection (EUVD-2026-123335) VVulDB Updatesvor 4 Std.CVE-2026-126624 | Progressive Robot hMailServer 6.3.7 Windows installer permission (EUVD-2026-123329) VVulDB Updatesvor 4 Std.CVE-2026-126623 | Progressive Robot hMailServer up to 6.3.7 JSON reader allocation of resources (EUVD-2026-123328)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4334255/it-security-nachrichten/claude-codes-dont-ask-again-button-has-a-secrets-spilling-problem/