GHSA-3V94-MW7P-V465 vulnerabilities

Vulnerabilities for packages: deno, shadowsocks-rust, linkerd2-proxy, ztunnel, vector...

GHSA-3V94-MW7P-V465 vulnerabilities

Vulnerabilities for packages: ztunnel, deno, shadowsocks-rust, ztunnel-fips, vector, linkerd2-proxy, komodo...

GHSA-2X3R-HWV5-P32X Deno's AES GCM authentication tags are not verified

Summary This affects AES-256-GCM and AES-128-GCM in Deno, introduced by commit 0d1beed. Specifically, the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys might not be detected, which breaks the guarantees expected from AES-GCM. Older versions of Deno...

GHSA-PG9F-39PC-QF8G vulnerabilities

Vulnerabilities for packages: oxipng, wasmcloud, ztunnel, rust-analyzer, deno, oranda, yara-x, nushell, starship, cargo-c, pixi, ztunnel-fips, cargo-audit, zed, lychee, ruff, yazi, wadm, samply, fd...