DE
Product
Deno
38
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 10High 13Medium 13Low 2
Watch
Add Deno to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27934 | 8.8 | Mar 6 | *const c_void / ExternalPointer unsoundness leading to use-after-free Affected: 1.36.2 before 1.40.3 |
| CVE-2024-27933 | 8.8 | Mar 6 | Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass Affected: 1.39.0 |
| CVE-2023-28446 | 8.8 | Mar 24 | Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization Affected: before 1.31.2 |
| CVE-2026-49401 | 8.4 | Jun 23 | Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS) Affected: before 2.7.14 |
| CVE-2021-41641 | 8.4 | Jun 12 | Deno <=1.14.0 file sandbox does not handle symbolic links correctly Affected: 1.10.3 through 1.14.0 |
| CVE-2024-27935 | 8.3 | Mar 6 | Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination Affected: 1.35.1 before 1.36.3 |
| CVE-2026-49402 | 8.1 | Jun 23 | Deno: Command Injection via spawnSync & spawn on Windows Affected: before 2.7.10 |
| CVE-2025-61787 | 8.1 | Oct 8 | Deno is Vulnerable to Command Injection on Windows During Batch File Execution Affected: through 2.2.15; 2.3.0 before 2.5.3 |
| CVE-2026-22863 | 7.5 | Jan 15 | Deno node:crypto doesn't finalize cipher Affected: before 2.6.0 |
| CVE-2023-26103 | 7.5 | Feb 25 | Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket function, which contains regexes in the form… Affected: before 1.31.0 |
| CVE-2023-22499 | 7.5 | Jan 17 | Interactive permission prompt spoofing in Deno Affected: 1.9.0 before 1.29.3 |
| CVE-2026-49440 | 7.4 | Jun 23 | Deno: Miller-Rabin Primality Test Allows Zero Rounds Affected: before 2.8.1 |
| CVE-2024-32477 | 7.4 | Apr 18 | Race condition when flushing input stream leads to permission prompt bypass Affected: before 1.42.2 |
Showing 13