$ the-wire · showcase
Claude Code plugin pins can be bypassed, Codex tightens its sandbox
By RepoJournal · Filed · About Agentic Coding · Composed from the cited sources · methodology
19 people shipped this
ashwin-ant
@ashwin-ant
1 cited
viyatb-oai
@viyatb-oai
1 cited
copyberry
@copyberry
1 cited
Saoud Rizwan
@saoudrizwan
1 cited
sarahdeaton
@sarahdeaton
GitHub Actions
@actions-user
iceweasel-oai
@iceweasel-oai
rekram1-node
@rekram1-node
opencode-agent[bot]
@opencode-agent[bot]
jvargassanchez-dot
@jvargassanchez-dot
amelidev
@amelidev
elberthc-byte
@elberthc-byte
urielefrenvirtusa
@urielefrenvirtusa
malhotra5
@malhotra5
Minho Yoo
@irontaek
Bee
@abeatrix
lifeizhou-ap
@lifeizhou-ap
DOsinga
@DOsinga
matt-maguire
@matt-maguire
Two credential-and-sandbox security fixes land alongside a Claude Code release that adds gateway policy keys and subagent compaction controls.
Plugin Commit SHA Pin Bypass Allows Installation of Attacker-Controlled Code anthropics/claude-code
A plugin's commit SHA pin no longer guarantees you install the code you pinned: the pin can be bypassed to install attacker-controlled code. If you install Claude Code plugins from third-party marketplaces, treat pinned SHAs as advisory until this is fixed.
Prevent brokered credential aliases from bypassing MITM hooks (#52661) openai/codex
Codex now returns 403 blocked-by-mitm-hooks instead of forwarding: a brokered credential bound to a hooked host could previously be replayed against an unhooked alias, letting the proxy inject the real credential while skipping hook policy. Both HTTP forwarding and MITM paths check before dummy credentials are replaced.
Reject reserved Serde JSON keys in code mode openai/codex
Code mode rejects $serde_json::private::RawValue and $serde_json::private::Number object keys before V8's serialized JSON reaches serde_json, closing a path where nested marker objects slipped past the parser's recursion limit; marker text inside strings still passes. Relevant if you feed untrusted JSON through Codex in code mode.
v2.1.296 anthropics/claude-code
Claude Code v2.1.296 adds a code key to the Claude apps gateway's managed.policies[], applying the same settings as cli in Claude Desktop's Code tab and turning on Desktop gateway mode when paired with desktop. Also new: autoCompactWindow in subagent frontmatter and --agents definitions, letting a subagent compact earlier than the main conversation, and CLAUDE_CODE_WORKFLOW_SUBAGENT_MODEL to pi...
Default to the first Cline recommended model (Sonnet 5.5 fallback) across CLI, extension, and desktop (#14959) cline/cline
The CLI, VS Code extension, and desktop app now resolve the first Cline recommended model, with anthropic/claude-sonnet-5.5 as the shared fallback, replacing three divergent defaults (the CLI had been falling back to the first catalog entry by release date, currently claude-haiku-5.5). If you relied on a specific default model, set it explicitly. Also shipped: in-chat connector auth via Composi...
