Advisories · Technology
deno.
Every CVE that names deno among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
Deno 2.7.0 through 2.9.7 Command Injection via node:child_process
- deno
- Command injection
- CVSS 7.6 High
Private npm registry support used scope auth token for downloading tarballs
- deno
- Information disclosure
- CVSS 7.7 High
Race condition when flushing input stream leads to permission prompt bypass
- deno
- Command injection
- Race condition