Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: gnomeExtensions.claude-code-usage

Found 1 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-33068
created 1 day, 1 hour ago
Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File

Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determining whether to display the workspace trust confirmation dialog. A malicious repository could set permissions.defaultMode to bypassPermissions in its committed .claude/settings.json, causing the trust dialog to be silently skipped on first open. This allowed a user to be placed into a permissive mode without seeing the trust confirmation prompt, making it easier for an attacker-controlled repository to gain tool execution without explicit user consent. This issue has been patched in version 2.1.53.

References

Affected products

claude-code
  • ==< 2.1.53

Matching in nixpkgs

pkgs.claude-code-bin

Agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster

pkgs.gnomeExtensions.claude-code-usage

Display Claude Code usage in the top panel. This extension uses anthropic.com services. This extension is not affiliated, funded, or in any way associated with Claude.

  • nixos-unstable 4
    • nixpkgs-unstable 4
    • nixos-unstable-small 4

pkgs.gnomeExtensions.claude-code-usage-indicator

Shows remaining time and usage percentage for Claude Code sessions in the top panel. Displays format like '3h 12m (30%)' showing both time remaining and percentage consumed. Automatically refreshes every 5 minutes.

  • nixos-unstable 3
    • nixpkgs-unstable 3
    • nixos-unstable-small 3
  • nixos-25.11 3
    • nixos-25.11-small 3
    • nixpkgs-25.11-darwin 3

Package maintainers