Securitysshole: password bypass in Alpine’s OpenSSH

@siteboon/claude-code-ui@1.24.0

Skip this version — install 1.27.1 instead.

1 known advisory (worst: high), fixed in 1.25.0.

Why this verdict

  • 1 known advisory (worst: high), fixed in 1.25.0.Evidence

Confidence 100% · algorithm v1 · computed 2026-11-06. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
1 known
License
GPL-3.0
Install scripts
Runs scripts on install
Build provenance
No provenance
Weekly downloads
37
  • GHSA-gv8f-wpm2-m5wr@siteboon/claude-code-ui Vulnerable to Unauthenticated RCE via WebSocket Shell Injection

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

Check the official release notes below for behaviour changes before merging.

Release notes

Read the package page on npm for this version’s features and fixes.

Deprecations and deadlines

The maintainer has not deprecated this version on npm.