Skip to content
OpenAdvisories

Package · crates.io

deno_runtime

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2024-27936

    Deno interactive permission prompt spoofing via improper ANSI stripping

    Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to version 1.41.0 of the deno library, maliciously crafted permission request can show the spoofed permission prompt by inserting a broken ANS…

    denoland deno deno deno_runtime crates.io
  • High 8.6
    CVE-2023-33966

    Deno missing "--allow-net" permission check for built-in Node modules

    Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and deno_runtime 0.114.0, outbound HTTP requests made using the built-in `node:http` or `node:https` modules are incorrectly not checked against the network permission allow list (`--allow-net`).…

    denoland deno deno deno_runtime crates.io
  • High 8.8
    CVE-2023-28446

    Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization

    Deno is a simple, modern and secure runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Arbitrary program names without any ANSI filtering allows any malicious program to clear the first 2 lines of a `op_spawn_child` or `op_kill` prompt a…

    denoland deno deno deno_runtime crates.io