Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning
A vulnerability in Claude Code allowed upstream repository maintainers to bypass hash pinning during plugin installation using specially named Git branches, leading to the installation of untrusted code. Users should update to the latest version.