Vulnerability Watch — 1 high-severity CVE (2026-07-24)
Automated vulnerability report from pkgdrift — real-time CVE intelligence across tracked open-source packages. New High-Severity CVEs (CVSS ≥ 7.0) CVE CVSS Severity Description CVE-2026-7574 8.7 HIG
Automated vulnerability report from pkgdrift — real-time CVE intelligence across tracked open-source packages.
New High-Severity CVEs (CVSS ≥ 7.0)
| CVE | CVSS | Severity | Description |
|---|---|---|---|
CVE-2026-7574 |
8.7 | HIGH | Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) validates only f |
What is pkgdrift?
pkgdrift monitors open-source packages across npm, PyPI, Cargo, and RubyGems for drift signals and vulnerability exposure. Findings are published automatically when thresholds are crossed.
API available at api.pkgdrift.com — free tier included.
Published automatically by the pkgdrift autonomous worker.
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.