deno_runtime vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-48934Mediumdeno: Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables CVE-2025-48888Mediumdeno: Deno run with --allow-read and --deny-read flags results in allowed CVE-2024-27936Highdeno: Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping CVE-2023-33966Highdeno: Missing "--allow-net" permission check for built-in Node modules CVE-2023-28446Highdeno_runtime: Interactive `run` permission prompt spoofing via improper ANSI neutralization CVE-2023-28445CriticalDeno: Deno improperly handles resizable ArrayBuffer

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo