CVE-2024-27936

CVE-2024-27936 (Deno) affects Deno runtime prior to 1.41.0. Maliciously crafted permission requests could inject a broken ANSI escape sequence, causing the prompt to display spoofed content (e.g., file path or program name) while permissions granted reflect the original input. This is resolved in...

CVE-2023-28445

CVE-2023-28445 affects Deno (Rust-based runtime for JavaScript/TypeScript). The issue arises from resizing ArrayBuffers passed to asynchronous functions that are shrunk during the operation, potentially causing an out-of-bounds read/write. The only affected release is Deno 1.32.0; Deno Deploy is ...

CVE-2023-33966

Deno 1.34.0 and deno_runtime 0.114.0 allow outbound HTTP requests via built-in node:http/node:https without checking the network allow-list. This affects dependencies using these modules. The issue is patched in Deno v1.34.1 and deno_runtime 0.114.1; update all affected installations. Deno Deploy...