Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-x2qc-cmh9-f4hf
  • crates.io/deno
 Deno: Denial of service via non-ASCII bytes in WebSocket response headers 17 Jun
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-8xpq-cjcf-3wh9
  • crates.io/deno
 Deno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS) 16 Jun
  • Fix available
  • Severity - 7.3 (High)
GHSA-968w-xfqw-vp9q
  • crates.io/deno
 Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions 16 Jun
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-v8fw-85r8-5m23
  • crates.io/deno
 Deno: Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks 16 Jun
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-9xg4-qhm4-g43w
  • crates.io/deno
 Deno: Miller-Rabin Primality Test Allows Zero Rounds 16 Jun
  • Fix available
  • Severity - 7.4 (High)
GHSA-7xh3-mhg9-jcw8
  • crates.io/deno
 Deno: Command Injection via spawnSync & spawn on Windows 16 Jun
  • Fix available
  • Severity - 8.1 (High)
GHSA-4c8g-jvcx-v4hv
  • crates.io/deno
 Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access 16 Jun
  • Fix available
  • Severity - 5.2 (Medium)
GHSA-83pc-3rw9-qpwj
  • crates.io/deno
 Deno: WebSocket API sandbox bypass via missing post-DNS check 16 Jun
  • Fix available
  • Severity - 5.2 (Medium)
GHSA-cpgj-f7g3-2pp2
  • crates.io/deno
 Deno: `fetch()` API sandbox bypass via missing DNS resolution check 16 Jun
  • Fix available
  • Severity - 5.2 (Medium)
GHSA-chqv-56wv-7564
  • crates.io/deno
 Deno's TLS retry copies stale upgrade hook, risking plaintext traffic 27 May
  • Fix available
  • Severity - 7.4 (High)
GHSA-4c96-w8v2-p28j
  • crates.io/deno
 Deno vulnerable to command Injection via incomplete shell metacharacter blocklist in node:child_process 13 Mar
  • Fix available
  • Severity - 8.1 (High)
GHSA-hmh4-3xvx-q5hr
  • crates.io/deno
 Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process 19 Feb
  • Fix available
  • Severity - 8.1 (High)
GHSA-m3c4-prhw-mrx6
  • crates.io/deno
 Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass 16 Jan
  • Fix available
  • Severity - 8.1 (High)
GHSA-5379-f5hf-w38v
  • crates.io/deno
 Deno node:crypto doesn't finalize cipher 16 Jan
  • Fix available
  • Severity - 9.2 (Critical)
GHSA-m2gf-x3f6-8hq3
  • crates.io/deno
 Deno is Vulnerable to Command Injection on Windows During Batch File Execution 08 Oct 2025
  • Fix available
  • Severity - 8.1 (High)
GHSA-qq26-84mh-26j9
  • crates.io/deno
 Deno's --deny-read check does not prevent permission bypass 08 Oct 2025
  • Fix available
  • Severity - 3.3 (Low)
Load more...