782 matches found
PT-2022-11451
Name of the Vulnerable Software and Affected Versions Deno versions 1.14.0 and earlier Description The issue concerns the file sandbox in Deno not handling symbolic links correctly. When Deno is run with specific write access, the Deno.symlink method can be exploited to gain access to any...
CVE-2021-41641: Improper Link Resolution Before File Access
Deno =1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory...
Sandbox bypass leading to arbitrary code execution in Deno
Impact The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass permission checks and execute arbitrary shell code. There is no evidence that this vulnerability has been...
GHSA-838H-JQP6-CF2F Sandbox bypass leading to arbitrary code execution in Deno
Impact The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass permission checks and execute arbitrary shell code. There is no evidence that this vulnerability has been...
CVE-2022-24783
Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...
Code injection
Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...
CVE-2022-24783
Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...
CVE-2022-24783 Sandbox bypass leading to arbitrary code execution in Deno
Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...
CVE-2022-24783 Sandbox bypass leading to arbitrary code execution in Deno
Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...
CVE-2022-24783 Sandbox bypass leading to arbitrary code execution in Deno
Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...
CVE-2022-24783
CVE-2022-24783 (Deno runtime) affects Deno versions 1.18.0–1.20.2 inclusive, where a malicious actor controlling code could bypass permission checks and execute arbitrary shell code within the Deno runtime. The issue does not affect Deno Deploy. The vulnerability has been patched in Deno 1.20.3. ...
PT-2022-16876 · Deno · Deno
Name of the Vulnerable Software and Affected Versions: Deno versions 1.18.0 through 1.20.2 Description: The issue allows a malicious actor controlling the code executed in a Deno runtime to bypass all permission checks and execute arbitrary shell code. This does not affect users of Deno Deploy. T...
CVE-2022-24783: Improper Privilege Management
Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 inclusive are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This...
Deno 安全漏洞
Deno is open source a simple , modern and secure JavaScript and TypeScript runtime environment . It uses V8 and built with Rust. Versions of Deno from 1.18.0 to 1.20.2 contain a security vulnerability that allows an attacker to bypass all privilege checks and execute arbitrary shell code...
deno (>=0.35.0, <=1.3.0), diss (>=0.0.1, <=0.2.10) +8 more potentially affected by unknown CVE via pty (>=0.1.6, <=0.2.2)
pty CARGO version =0.1.6, =0.35.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.0, =0.1.0 - webterm-rs 0.1.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0015...
CVE-2021-42139
Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations...
CVE-2021-42139
Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations...
CVE-2021-42139
Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations...