Deno Runtime vulnerabilities

2 known vulnerabilities in Deno Runtime from Deno. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  deno: Incorrect Default Permissions

  CVE-2023-33966May 31, 2023Denoland

  Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and deno_runtime 0.114.0, outbound HTTP requests made using the built-in `node:http` or `node:https` modules are incorrectly not checked against the network permission allow list (`--allow-net`).

• 9.8 Critical severity

  deno: Out-of-bounds Read

  CVE-2023-28445Mar 24, 2023Denoland

  Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this ha