Claude Code patches two opposite plugin path bugs

Claude Code 2.1.265 fixes two plugin path bugs that broke in opposite directions, per the release notes.

The first is the one to care about. On macOS and Linux, a plugin path containing a backslash could slip past the symlink containment check, the guardrail that's supposed to stop a plugin from resolving to a location outside its own root. That's a real gap: the whole point of containment checks is to hold up against unusual input, not just the paths a plugin is expected to send.

The second bug ran the other way. Plugin directories whose names started with two dots were getting rejected when they shouldn't have been, a false positive rather than a security hole.

Both are fixed in the same release. If you install third-party Claude Code plugins, the backslash issue is the reason to upgrade. It's a path-validation bug, the kind of thing that's boring until a plugin (or a malicious one masquerading as legitimate) uses it to write or read outside where it's supposed to. The release notes don't say how long the bypass existed before this patch, or whether anyone found it in the wild versus during internal review.