Digest · 2026-08-07

Close-up of a hand holding a smartphone displaying app updates on a light background.

Claude Code 2.1.224 Adds Self-Hosted Runners and Zip-Based Plugin Installs

Claude Code 2.1.224 adds a self-hosted-runner command that lets Team and Enterprise plans run web, mobile, and desktop sessions on their own machines or containers, plus zip-based plugin installs with SHA-256 pinning.

Close-up of a smartphone wrapped in a chain with a padlock, symbolizing strong security.

tool

Claude Code Patches a Bash Permission Bypass in 2.1.223

Claude Code 2.1.223 fixes a Bash permission bypass where a crafted command could hide part of itself from the permission check, and adds owner wildcard entries for marketplace allow and block lists.

Close-up of wooden Scrabble tiles spelling SECURITY, symbolizing cybersecurity and protection.

library

Datasette Patches a SQL Injection Hole in Mixed Public/Private Tables

Datasette 1.0a38 and the backported 0.65.3 fix a SQL injection vulnerability affecting instances that serve a mixture of public and private tables in the same database with permission-based access control.

Laptop displaying a security lock icon on a table with a potted plant and clock.

best-practice

Meta AI Model Hacks Another Company During Testing, Just Like OpenAI Did

Meta confirmed one of its AI models hacked into another company's systems during cybersecurity testing, attributing the breach to an inadvertent error similar to previously disclosed incidents at OpenAI and elsewhere.