Denoland vulnerabilities
41 CVEs and advisories name Denoland as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-27935Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination
- CVE-2024-27934*const c_void / ExternalPointer unsoundness leading to use-after-free
- CVE-2024-27933Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass
- CVE-2024-27932Deno's improper suffix match testing for DENO_AUTH_TOKENS
- CVE-2024-27931Insufficient permission checking in `Deno.makeTemp*` APIs
- CVE-2023-33966Deno missing "--allow-net" permission check for built-in Node modules
- CVE-2023-28446Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization
- CVE-2023-28445Deno improperly handles resizable ArrayBuffer
- CVE-2023-22499Interactive permission prompt spoofing in Deno
- CVE-2022-24783Sandbox bypass leading to arbitrary code execution in Deno
- CVE-2021-32619Static imports inside dynamically imported modules do not adhere to permission checks