deno/deno CVE-2026-49402: high 8.1

Command Injection via spawnSync & spawn on Windows

Action: Upgrade deno to 2.7.10 or later.

Affected

Fixed versions

Sources

• deno-runtime: GHSA-7xh3-mhg9-jcw8
• https://www.cve.org/CVERecord?id=CVE-2026-49402

CVE-2026-49402 · published 2026-05-27T13:08:13Z · modified 2026-05-30T03:06:59Z · JSON