deno vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-27933Highdeno: Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass CVE-2024-27932Mediumdeno: Deno's improper suffix match testing for DENO_AUTH_TOKENS CVE-2024-27936Highdeno: Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping CVE-2024-27935Highdeno: Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination CVE-2024-27931Mediumdeno: Insufficient permission checking in `Deno.makeTemp*` APIs CVE-2023-33966Highdeno: Missing "--allow-net" permission check for built-in Node modules CVE-2023-26103Mediumdeno: Regular Expression Denial of Service in Deno.upgradeWebSocket API CVE-2023-28446Highdeno_runtime: Interactive `run` permission prompt spoofing via improper ANSI neutralization CVE-2023-28445CriticalDeno: Deno improperly handles resizable ArrayBuffer CVE-2023-22499Highdeno: Deno is vulnerable to race condition via interactive permission prompt spoofing CVE-2021-41641Highdeno: Link Following in Deno CVE-2022-24783Criticaldeno: Sandbox bypass leading to arbitrary code execution in Deno CVE-2021-32619Criticaldeno: Deno's static imports inside dynamically imported modules do not adhere to permission checks

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo