精选85Claude Agent SDK Python(GitHub Releases)AI 编程与模型
Claude Agent SDK Python v0.2.121:修复
v0.2.121
推荐理由
使用 Claude Agent SDK 的开发者务必升级:此版本修复了 argv 注入漏洞,可防止恶意输入被当作 CLI 标志执行,影响安全。建议尽快升级至 v0.2.121。
Bug Fixes
- Fixed argv flag injection via resume and session_id options: --resume and --session-id are now passed as single =-joined argv tokens (e.g. --resume=<value>) so that a dash-prefixed value is never misinterpreted as an independent CLI flag (#1123)
Internal/Other Changes
- Hardened build scripts against command injection via CLAUDE_CLI_VERSION: Added version validation (_cli_version_validation.py) and eliminated shell interpolation in download_cli.py and update_cli_version.py so that a malformed version string cannot inject shell or Python code during builds (#1117)
- CI now lints and typechecks scripts/ alongside src/ and tests/
- CI CLI install steps now fail properly when curl errors (added shell: bash for pipefail)
- Updated bundled Claude CLI to version 2.1.212
PyPI: https://pypi.org/project/claude-agent-sdk/0.2.121/
代码 · 1 行
pip install claude-agent-sdk==0.2.121更进一步:量化金融体系
看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力