Claude Code fixes a sandbox boundary and hardens hooks
Versions 2.1.299 and 2.1.300 correct, among other things, writing into a plugin directory from the sandbox and validating the entries modified by the hooks.
stable releases
Facts, analysis and limits
Verified facts
- 2.1.299: correction of a sandboxed command that can write in --plugin-dir, whose code is reloaded out of sandbox.
- 2.1.300: updatedInput from PreToolUse and PermissionRequest hooks is validated like normal tool input.
- 2.1.300: local transcripts also record system prompts, tools and API parameters.
What changes
The border between privileged extension and isolated command requires an update.
Practical implication
Update and review the confidentiality of transcripts before sharing.
Availability
Stable versions published on 14 October; no geographical restriction indicated.
Limits and uncertainty
A group of substantive fixes; do not interpret every changelog line as a newly disclosed, publicly exploited vulnerability.