deno/deno CVE-2026-49859: medium 5.2

`fetch()` API sandbox bypass via missing DNS resolution check

Action: Upgrade deno to 2.8.1 or later.

Affected

Fixed versions

Sources

• deno-runtime: GHSA-cpgj-f7g3-2pp2
• https://www.cve.org/CVERecord?id=CVE-2026-49859

CVE-2026-49859 · published 2026-05-27T13:07:52Z · modified 2026-06-02T19:28:01Z · JSON