basejmp (0.1.0), clarinet (>=0.2.0, <=0.10.0) +9 more potentially affected by CVE-2025-48934 via deno_runtime (>=0.3.0, <=0.105.0)

denoruntime CARGO version =0.3.0, =0.2.0, =1.6.1, =1.12.2, =0.2.0-rc1, =0.4.1, =0.4.1, =0.4.1, =0.4.1, =0.4.2 - zinniaruntime 0.0.3 Source cves: CVE-2025-48934 Source advisory: OSV:GHSA-7W8P-CHXQ-2789...

CVE-2025-48934

CVE-2025-48934 affects Deno runtime prior to v2.1.13 and v2.2.13, where Deno.env.toObject() can reveal environment variables despite --deny-env, due to the reading of variables exempt from the deny filter. The issue allows code to access most environment variables via toObject, potentially leakin...

CVE-2025-48934

creationtimestamp| type| source ---|---|--- 2025-06-03 21:04:23+00:00| published-proof-of-concept| https://github.com/denoland/deno/security/advisories/GHSA-7w8p-chxq-2789 2025-06-04 20:07:06+00:00| seen| https://bsky.app/profile/wasm.activitypub.awakari.com.ap.brid.gy/post/3lqsm3w6t5j42...