Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@siteboon/claude-code-ui

3 known vulnerabilities (1 critical, 2 high), with the versions each affects and the releases that fix them.

Latest release
2.0.0 (Apr 3, 2026): no advisory affects it
Newest unaffected release
1.27.1 (Mar 29, 2026)
Advisories
3 · 1 critical, 2 high
Weekly downloads
594
Dependents
0
Releases
55 since 1.8.2 (Sep 22, 2025)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 3

  • Cloud CLI WebSocket shell injection

    Affected: fixed in 1.25.0.

    Fixed in 1.25.0 (released Mar 10, 2026, 1 day before disclosure).

    The latest release, 2.0.0, is not affected.

    67% of @siteboon/claude-code-ui downloads last week were affected versions (1.2K).

  • Shell Command Injection in Git Routes [CloudCLI UI]

    Affected: fixed in 1.24.0.

    Fixed in 1.24.0 (released Mar 9, 2026, 2 days before disclosure).

    The latest release, 2.0.0, is not affected.

    65% of @siteboon/claude-code-ui downloads last week were affected versions (1.1K).

  • CVE-2026-31862Critical 9.1

    Cloud CLI has Command Injection via Multiple Parameters

    Affected: fixed in 1.24.0.

    Fixed in 1.24.0 (released Mar 9, 2026, 2 days before disclosure).

    The latest release, 2.0.0, is not affected.

    65% of @siteboon/claude-code-ui downloads last week were affected versions (1.1K).