608 matches found
CVE-2025-61785 Deno's --deny-write check does not prevent permission bypass
Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtim...
CVE-2025-61785
Summary : CVE-2025-61785 affects Deno versions prior to 2.5.3 and 2.2.15, where Deno.FsFile.prototype.utime and utimeSync are not properly restricted by --deny-write=./. This allows changing atime/mtime on a read-only opened file even when write is disallowed, bypassing the permission model. The ...
CVE-2025-61785 Deno's --deny-write check does not prevent permission bypass
Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtim...
CVE-2025-61785 Deno's --deny-write check does not prevent permission bypass
Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtim...
PT-2025-41209
Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.5.3 Deno versions prior to 2.2.15 Description Deno is a JavaScript, TypeScript, and WebAssembly runtime. The Deno.FsFile.prototype.stat and Deno.FsFile.prototype.statSync functions do not enforce the --deny-read=./...
PT-2025-41208
Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.5.3 Deno versions prior to 2.2.15 Description Deno is a JavaScript, TypeScript, and WebAssembly runtime. The Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync functions are not limited by the...
PT-2025-41212
Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.5.3 and 2.2.15 Description Deno, a JavaScript, TypeScript, and WebAssembly runtime, is susceptible to Command Line Injection attacks on Windows operating systems when batch files are executed. The Windows operating...
Deno 安全漏洞
Deno is a simple, modern and secure JavaScript and TypeScript runtime environment from Deno Open Source. A security vulnerability exists in Deno versions prior to 2.5.3 and prior to 2.2.15, which stems from insufficient permission model checking and could lead to bypassing the permission model...
Deno 安全漏洞
Deno is a simple, modern and secure JavaScript and TypeScript runtime environment from Deno Open Source. A security vulnerability exists in Deno versions prior to 2.5.3 and prior to 2.2.15, which stems from the fact that the utime and utimeSync methods are not constrained by the privilege model,...
Deno 命令注入漏洞
Deno is a simple, modern and secure JavaScript and TypeScript runtime environment from Deno Open Source. A command injection vulnerability exists in Deno versions prior to 2.5.3 and prior to 2.2.15, which stems from the vulnerability to command line injection attacks when executing batch files on...
GHSA-VG2R-RMGP-CGQJ Deno's --deny-write check does not prevent permission bypass
Summary Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtime times on the file stream resource even when the file is opened with read only permission...
Deno's --deny-write check does not prevent permission bypass
Summary Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtime times on the file stream resource even when the file is opened with read only permission...
CVE-2025-61785
creationtimestamp| type| source ---|---|--- 2025-10-07 20:23:32+00:00| published-proof-of-concept| https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj...
EUVD-2021-2134
Malware in sbrugna...
EUVD-2024-46053
Malicious code in bioql PyPI...
EUVD-2022-5954
Malicious code in bioql PyPI...
EUVD-2023-0593
Malicious code in bioql PyPI...
EUVD-2025-24026
Malicious code in bioql PyPI...