GHSA-pq7j-f95f-qfcv: Claude Code pinned-SHA plugin checkout bypass

Evidence record

Public security advisory explains SHA-shaped Git branch ambiguity, controlled upstream precondition and resolved-HEAD verification in Claude Code 2.1.179.

Read the original source ↗

Claim-level citations (3)

• supportsClaude Code plugin pin bypass through SHA-shaped Git branch: The advisory lists Claude Code versions earlier than 2.1.179 as affected and 2.1.179 as patched through explicit resolved HEAD comparison.

  GHSA affected versions and patched release

• supportsClaude Code plugin pin bypass through SHA-shaped Git branch: A 40-hex-character marketplace pin was not independently enforced as the checked-out HEAD, allowing a same-named attacker branch to shadow the target revision on permissive Git hosts.

  GHSA technical details, ambiguous Git ref checkout

• supportsClaude Code plugin pin bypass through SHA-shaped Git branch: The reviewed advisory describes a patch for an attacker-controlled SHA-shaped branch at plugin installation, but does not document a confirmed victim compromise or a cryptographic hash collision.

  GitHub reviewed advisory GHSA-pq7j-f95f-qfcv, description, affected and patched releases