EUVD-2023-1626

Malicious code in bioql PyPI...

EUVD-2022-1369

Malicious code in bioql PyPI...

EUVD-2024-0849

Malicious code in bioql PyPI...

EUVD-2024-0827

Malicious code in bioql PyPI...

EUVD-2024-30286

Malicious code in bioql PyPI...

EUVD-2024-0803

Malicious code in bioql PyPI...

EUVD-2024-1029

Malicious code in bioql PyPI...

EUVD-2023-0976

Malicious code in bioql PyPI...

CVE-2025-48935

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 2.2.0 and prior to versions 2.2.5, it is possible to bypass Deno's permission read/write db permission check by using ATTACH DATABASE statement. Version 2.2.5 contains a patch for the issue...

CVE-2025-24015

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions 1.46.0 through 2.1.6 have an issue that affects AES-256-GCM and AES-128-GCM in Deno in which the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys might not be detected, which breaks the...

GHSA-JV4X-JV3H-QFF5 Deno vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Summary Static imports are exempted from the network permission check. An attacker could exploit this to leak the password file on the network. Details Static imports in Deno are exempted from the network permission check. This can be exploited by attackers in multiple ways, when third-party code...

Deno vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Summary Static imports are exempted from the network permission check. An attacker could exploit this to leak the password file on the network. Details Static imports in Deno are exempted from the network permission check. This can be exploited by attackers in multiple ways, when third-party code...

Deno's AES GCM authentication tags are not verified

Summary This affects AES-256-GCM and AES-128-GCM in Deno, introduced by commit 0d1beed. Specifically, the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys might not be detected, which breaks the guarantees expected from AES-GCM. Older versions of Deno...

CVE-2025-48888

The CVE-2025-48888 vulnerability affects Deno runtimes where the --deny-* flags are not correctly prioritized over matching --allow-* flags. Affected versions: 1.41.3 through 2.1.12 (and mixed ranges up to 2.3.1 in PT-Security doc). The issue occurs with the command deno run --allow-read --deny-r...

PT-2025-23840 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions 1.41.3 through 2.1.12 Deno versions 1.41.3 through 2.2.12 Deno versions 1.41.3 through 2.3.1 Description: The issue affects Deno, a JavaScript, TypeScript, and WebAssembly runtime, where the --deny- flag is not prioritized over...

Deno 安全漏洞

Deno is a simple, modern and secure JavaScript and TypeScript runtime environment from Deno Open Source. A security vulnerability exists in Deno versions prior to 2.2.0 through 2.2.5, which stems from a read/write permission check that can be bypassed via the ATTACH DATABASE statement...

CVE-2024-27932

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.8.0 and prior to version 1.40.4, Deno improperly checks that an import specifier's hostname is equal to or a child of a token's hostname, which can cause tokens to be sent to servers they shouldn't be sent to. An aut...

CVE-2024-27933

Deno is a JavaScript, TypeScript, and WebAssembly runtime. In version 1.39.0, use of raw file descriptors in opnodeipcpipe leads to premature close of arbitrary file descriptors, allowing standard input to be re-opened as a different resource resulting in permission prompt bypass. Node childproce...

CVE-2021-32619

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through import or new Worker might have been able to bypass network and file system permission checks when statically importing other modules...

CVE-2022-24783

Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...