crates.io/deno CVE-2026-22863: critical

Deno node:crypto doesn't finalize cipher

Action: Upgrade deno to 2.6.0 or later.

cargo update -p deno --precise 2.6.0

Affected

Fixed versions

Sources

• osv: GHSA-5379-f5hf-w38v
• https://github.com/denoland/deno/security/advisories/GHSA-5379-f5hf-w38v
• https://nvd.nist.gov/vuln/detail/CVE-2026-22863
• https://github.com/denoland/deno
• https://github.com/denoland/deno/releases/tag/v2.6.0

CVE-2026-22863 · published 2026-01-16T15:49:35Z · modified 2026-02-03T03:17:23.374615Z · JSON