deno/deno CVE-2026-49983: medium 5.2

process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access

Action: Upgrade deno to 2.8.1 or later.

Affected

Fixed versions

Sources

• deno-runtime: GHSA-4c8g-jvcx-v4hv
• https://www.cve.org/CVERecord?id=CVE-2026-49983

CVE-2026-49983 · published 2026-05-27T13:08:05Z · modified 2026-06-02T23:17:57Z · JSON