https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 11:20:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-234286 EUVD-2026-234286 https://cve.radiocsirt.org/vuln/euvd-2026-234286 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24783 <p>Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This vulnerability does not affect users of Deno Deploy. The vulnerability has been patched in Deno 1.20.3. There is no workaround. All users are recommended to upgrade to 1.20.3 immediately.</p> <p>Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This vulnerability does not affect users of Deno Deploy. The vulnerability has been patched in Deno 1.20.3. There is no workaround. All users are recommended to upgrade to 1.20.3 immediately.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-24783 https://cve.radiocsirt.org/vuln/ghsa-838h-jqp6-cf2f <p><strong>Affected:</strong> crates.io: deno</p> <p>### Impact</p> <p>The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass permission checks and execute arbitrary shell code.</p> <p>There is **no** evidence that this vulnerability has been exploited in the wild.</p> <p>This vulnerability does **not** affect users of Deno Deploy.</p> <p>### Patches</p> <p>The vulnerability has been patched in Deno 1.20.3.</p> <p>### Workarounds</p> <p>There is no workaround. All users are recommended to upgrade to 1.20.3 immediately</p> <p>---</p> <p>The cause of this error was that certain FFI operations did not correctly check for permissions. The issue was fixed in [this](https://github.com/denoland/deno/pull/14115) pull request.</p> <p><strong>Affected:</strong> crates.io: deno</p> <p>### Impact</p> <p>The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass permission checks and execute arbitrary shell code.</p> <p>There is **no** evidence that this vulnerability has been exploited in the wild.</p> <p>This vulnerability does **not** affect users of Deno Deploy.</p> <p>### Patches</p> <p>The vulnerability has been patched in Deno 1.20.3.</p> <p>### Workarounds</p> <p>There is no workaround. All users are recommended to upgrade to 1.20.3 immediately</p> <p>---</p> <p>The cause of this error was that certain FFI operations did not correctly check for permissions. The issue was fixed in [this](https://github.com/denoland/deno/pull/14115) pull request.</p> https://cve.radiocsirt.org/vuln/ghsa-838h-jqp6-cf2f https://cve.radiocsirt.org/vuln/gsd-2022-24783 gsd-2022-24783 https://cve.radiocsirt.org/vuln/gsd-2022-24783