basejmp (0.1.0), clarinet (>=0.2.0, <=0.10.0) +9 more potentially affected by CVE-2025-48934 via deno_runtime (>=0.3.0, <=0.105.0)

denoruntime CARGO version =0.3.0, =0.2.0, =1.6.1, =1.12.2, =0.2.0-rc1, =0.4.1, =0.4.1, =0.4.1, =0.4.1, =0.4.2 - zinniaruntime 0.0.3 Source cves: CVE-2025-48934 Source advisory: OSV:GHSA-7W8P-CHXQ-2789...

vl-convert-rs (0.8.0) potentially affected by CVE-2024-27936 via deno_runtime (0.105.0)

denoruntime CARGO version 0.105.0 is affected by a known vulnerability. The following packages have a transitive dependency on denoruntime and may be impacted: - vl-convert-rs 0.8.0 Source cves: CVE-2024-27936 Source advisory: OSV:GHSA-M4PQ-FV2W-6HRW...

Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping

Summary A maliciously crafted permission request can show the spoofed permission prompt by inserting a broken ANSI escape sequence into the request contents. Details In the patch for CVE-2023-28446, Deno is stripping any ANSI escape sequences from the permission prompt, but permissions given to t...

deno_bench_util (>=0.73.0, <=0.79.0), deno_broadcast_channel (>=0.73.0, <=0.79.0) +37 more potentially affected by unknown CVE via tokio (>=1.21.1, <=1.24.0)

tokio CARGO version =1.21.1, =0.73.0, =0.73.0, =0.11.0, =0.161.0, =0.93.0, =0.102.0, =0.66.0, =0.15.0, =0.73.0, =0.71.0, =0.87.0, =0.79.0, =0.110.0, =0.80.0, =0.86.0 - denowebidl 0.85.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4Q83-7CQ4-P6WG...