Sandbox bypass leading to arbitrary code execution in Deno

Command Injection via incomplete shell metacharacter blocklist in node:child_process (bypass of CVE-2026-27190 fix)

Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process

Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass

Deno missing "--allow-net" permission check for built-in Node modules

Deno improperly handles resizable ArrayBuffer

Static imports inside dynamically imported modules do not adhere to permission checks

Deno: TLS retry copies stale upgrade hook, risking plaintext traffic

Deno has --allow-read / --allow-write permission bypass in `node:sqlite`

Deno contains a permission escalation via open of privileged files with missing `--deny` flag