跳到主内容
@wquguru
精选85Claude Agent SDK Python(GitHub Releases)AI 编程与模型

Claude Agent SDK Python v0.2.121:修复

v0.2.121

原文
发到 X
推荐理由

使用 Claude Agent SDK 的开发者务必升级:此版本修复了 argv 注入漏洞,可防止恶意输入被当作 CLI 标志执行,影响安全。建议尽快升级至 v0.2.121。

Bug Fixes

  • Fixed argv flag injection via resume and session_id options: --resume and --session-id are now passed as single =-joined argv tokens (e.g. --resume=<value>) so that a dash-prefixed value is never misinterpreted as an independent CLI flag (#1123)

Internal/Other Changes

  • Hardened build scripts against command injection via CLAUDE_CLI_VERSION: Added version validation (_cli_version_validation.py) and eliminated shell interpolation in download_cli.py and update_cli_version.py so that a malformed version string cannot inject shell or Python code during builds (#1117)
  • CI now lints and typechecks scripts/ alongside src/ and tests/
  • CI CLI install steps now fail properly when curl errors (added shell: bash for pipefail)
  • Updated bundled Claude CLI to version 2.1.212

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.121/

代码 · 1
pip install claude-agent-sdk==0.2.121

更进一步:量化金融体系

看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力

进入量化体系 →

相似阅读

另一事件,读法相近