CRITICAL: JWT tokens not cryptographically verified - security vulnerability

Related Claude Code issues

Matched on shared title terms, labels, topic and reported release — ranked so issues with real discussion come first.

• [Bug] Critical Security Vulnerability in Claude Code
  Resolved 💬 5 #6558
• [Bug] Critical Security Vulnerability: Unauthorized .env File Access
  Resolved 💬 3 #7921
• [FEATURE] Cryptographically signed harness blocks to distinguish Claude Code injections from user content
  Resolved 💬 3 #59144
• [FEATURE] Using JWT token from MCP OAuth with Hooks
  Resolved 💬 3 #25616
• [Feature Request] Add security context mode for local vulnerability testing
  Open 💬 0 v2.1.235 #88167
• Security Vulnerability: Bash Permission Bypass via Command Chaining
  Resolved 💬 6 #4956
• [Bug] Anthropic API Error: Usage Policy violation on JWT token test requests
  Resolved 💬 3 #11049
• Claude Code ignores deny rules in .claude/settings.local.json - security vulnerability
  Open 💬 19 #8961

Browse by topic

Browse all Claude Code issue topics →