Lucene search
+L

6 matches found

NVD
NVD
added 2025/06/04 8:15 p.m.14 views

CVE-2025-48888

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, deno run --allow-read --deny-read main.ts results in allowed, even though 'deny' should be stronger. The result is the same with all global unary permissions give...

6.9CVSS0.00342EPSS
SaveExploits1References6
Circl
Circl
added 2025/06/04 8:11 p.m.15 views

CVE-2025-48888

creationtimestamp| type| source ---|---|--- 2025-06-04 20:11:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqsmfcc2im42 2025-06-04 21:13:44+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xqxc-x6p3-w683...

6.9CVSS5.7AI score0.00342EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/06/04 7:15 p.m.4 views

CVE-2025-48888 Deno run with --allow-read and --deny-read flags results in allowed

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, deno run --allow-read --deny-read main.ts results in allowed, even though 'deny' should be stronger. The result is the same with all global unary permissions give...

6.9CVSS7AI score0.00342EPSS
SaveExploits1References6
OSV
OSV
added 2025/06/04 7:15 p.m.11 views

CVE-2025-48888 Deno run with --allow-read and --deny-read flags results in allowed

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, deno run --allow-read --deny-read main.ts results in allowed, even though 'deny' should be stronger. The result is the same with all global unary permissions give...

6.9CVSS6.5AI score0.00342EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2025/06/04 7:15 p.m.20 views

CVE-2025-48888 Deno run with --allow-read and --deny-read flags results in allowed

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, deno run --allow-read --deny-read main.ts results in allowed, even though 'deny' should be stronger. The result is the same with all global unary permissions give...

6.9CVSS0.00342EPSS
SaveExploits1References6
CVE
CVE
added 2025/06/04 7:15 p.m.63 views

CVE-2025-48888

The CVE-2025-48888 vulnerability affects Deno runtimes where the --deny-* flags are not correctly prioritized over matching --allow-* flags. Affected versions: 1.41.3 through 2.1.12 (and mixed ranges up to 2.3.1 in PT-Security doc). The issue occurs with the command deno run --allow-read --deny-r...

6.9CVSS6.5AI score0.00342EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder