Overview
China’s National Vulnerability Database (NVDB) is a cybersecurity repository operated by the Ministry of Industry and Information Technology (MIIT). Issues government-level security advisories on software vulnerabilities.
Recent Developments
- 2026-07-08: Issued security alert on claude-code versions 2.1.91–2.1.196 — characterizes built-in monitoring as “security backdoor” (2026-07-08-china-nvdb-claude-code-security-backdoor)
- Alleged unauthorized transmission of location and identity data to remote servers
- Urged immediate uninstall/upgrade; tighten dev tool network controls
- Escalation beyond employer-level bans (alibaba July 10 workplace ban)
Anthropic disputes "backdoor" framing — describes March 2026 anti-abuse experiment against unauthorized resellers and model-distillation; committed to full rollback.