Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/05/31 11:39 p.m.27 views

Missing "--allow-net" permission check for built-in Node modules

Impact Outbound HTTP requests made using the built-in "node:http" or "node:https" modules are incorrectly not checked against the network permission allow list --allow-net. Dependencies relying on these built-in modules are subject to the vulnerability too. Users of Deno versions prior to 1.34.0...

9.8CVSS6.7AI score0.00625EPSS
SaveExploits0References4Affected Software2
Prion
Prion
added 2023/05/31 6:15 p.m.26 views

Design/Logic Flaw

Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and denoruntime 0.114.0, outbound HTTP requests made using the built-in node:http or node:https modules are incorrectly not checked against the network permission allow list --allow-net. Dependencies relying on these built-in modules...

7.5CVSS9.4AI score0.00625EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder