CVE-2025-66479
Named by 2 kept items in this workspace.
Search every workspace for CVE-2025-66479. It matches the name as written, so it can find other things that share it.
The items that name it 2
Claude Code network sandbox bypass related to the sandbox interpreting a setting to block all outbound traffic as 'allow everything'; assigned to the 'sandbox-runtime' library rather than Claude Code itself
Recap of prior finding: allowedDomains: [] was read as 'allow everything' instead of 'block all outbound traffic' due to check allowedDomains.length > 0 evaluating false on empty array. Issued against sandbox-runtime on 2025-12-02. Patched in Claude Code v2.0.55 on 2025-11-26.
All cves in this workspace.