Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 3:55 a.m.•18 views

CVE-2024-27936

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to version 1.41.0 of the deno library, maliciously crafted permission request can show the spoofed permission prompt by inserting a broken ANSI escape sequence into the request...

8.8CVSS6.7AI score0.00943EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2024/03/22 4:17 a.m.•10 views

SUSE CVE-2024-27936

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to version 1.41.0 of the deno library, maliciously crafted permission request can show the spoofed permission prompt by inserting a broken ANSI escape sequence into the request...

8.8CVSS6.8AI score0.00943EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/03/06 9:05 p.m.•62 views

CVE-2024-27936 Deno interactive permission prompt spoofing via improper ANSI stripping

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to version 1.41.0 of the deno library, maliciously crafted permission request can show the spoofed permission prompt by inserting a broken ANSI escape sequence into the request...

8.8CVSS8.8AI score0.00943EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/06 9:05 p.m.•19 views

CVE-2024-27936 Deno interactive permission prompt spoofing via improper ANSI stripping

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to version 1.41.0 of the deno library, maliciously crafted permission request can show the spoofed permission prompt by inserting a broken ANSI escape sequence into the request...

8.8CVSS7AI score0.00943EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/06 9:05 p.m.•120 views

CVE-2024-27936

CVE-2024-27936 (Deno) affects Deno runtime prior to 1.41.0. Maliciously crafted permission requests could inject a broken ANSI escape sequence, causing the prompt to display spoofed content (e.g., file path or program name) while permissions granted reflect the original input. This is resolved in...

8.8CVSS8.6AI score0.00943EPSS
SaveExploits1References3Affected Software2
vulnersOsv
vulnersOsv
•added 2024/03/05 8:54 p.m.•6 views

vl-convert-rs (0.8.0) potentially affected by CVE-2024-27936 via deno_runtime (0.105.0)

denoruntime CARGO version 0.105.0 is affected by a known vulnerability. The following packages have a transitive dependency on denoruntime and may be impacted: - vl-convert-rs 0.8.0 Source cves: CVE-2024-27936 Source advisory: OSV:GHSA-M4PQ-FV2W-6HRW...

8.8CVSS5.3AI score0.00943EPSS
SaveExploits1
Circl
Circl
•added 2024/03/05 5:27 p.m.•28 views

CVE-2024-27936

creationtimestamp| type| source ---|---|--- 2024-03-05 17:27:58+00:00| published-proof-of-concept| https://github.com/denoland/deno/security/advisories/GHSA-m4pq-fv2w-6hrw...

8.8CVSS5.8AI score0.00943EPSS
SaveExploits1References1
Rows per page
Query Builder