Deno Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks

Private npm registry support used scope auth token for downloading tarballs

Deno interactive permission prompt spoofing via improper ANSI stripping

Insufficient permission checking in `Deno.makeTemp*` APIs

Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions

Improper neutralization of input during web page generation ("Cross-site Scripting") in deno_doc HTML generator

Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables

Deno run with --allow-read and --deny-read flags results in allowed

Deno's AES GCM authentication tags are not verified

Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access

Deno: WebSocket API sandbox bypass via missing post-DNS check

Deno: `fetch()` API sandbox bypass via missing DNS resolution check

Deno's improper suffix match testing for DENO_AUTH_TOKENS

Deno: Denial of service via non-ASCII bytes in WebSocket response headers