deno/deno CVE-2025-48934: medium
Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables
Action: Upgrade deno to 2.1.13 (2.1.x) or 2.2.13 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.13 | - |
| 2.2.0 | 2.2.13 | - |
Fixed versions
| 2.1.13 | 2.2.13 |
Sources
CVE-2025-48934 · published · modified · JSON