deno/deno CVE-2026-32260: high 8.1
Command Injection via incomplete shell metacharacter blocklist in node:child_process (bypass of CVE-2026-27190 fix)
Action: Upgrade deno to 2.7.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.7.2 | - |
Fixed versions
| 2.7.2 |
Sources
CVE-2026-32260 · published · modified · JSON