Skip to content
OpenAdvisories

Package · crates.io

deno_node

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.5
    CVE-2025-48935

    Deno has --allow-read / --allow-write permission bypass in `node:sqlite`

    Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 2.2.0 and prior to versions 2.2.5, it is possible to bypass Deno's permission read/write db permission check by using `ATTACH DATABASE` statement. Version 2.2.5 contains a patch fo…

    denoland deno deno deno_node crates.io
  • High 7.7
    CVE-2025-24015

    Deno's AES GCM authentication tags are not verified

    Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions 1.46.0 through 2.1.6 have an issue that affects AES-256-GCM and AES-128-GCM in Deno in which the authentication tag is not being validated. This means tampered ciphertexts or incorrect keys m…

    denoland deno deno deno_node crates.io