Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/05/31 11:39 p.m.27 views

Missing "--allow-net" permission check for built-in Node modules

Impact Outbound HTTP requests made using the built-in "node:http" or "node:https" modules are incorrectly not checked against the network permission allow list --allow-net. Dependencies relying on these built-in modules are subject to the vulnerability too. Users of Deno versions prior to 1.34.0...

9.8CVSS6.7AI score0.00625EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder