Skip to content
OpenAdvisories

Package · crates.io

deno_fetch

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-21620

    Deno's authorization headers not dropped when redirecting cross-origin

    Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. When you send a request with the Authorization header to one domain, and the response asks to redirect to a different domain, Deno'sfetch() redirect handling creates a follow-up r…

    denoland deno deno deno_fetch crates.io