crates.io/deno CVE-2022-24783: critical 10

Sandbox bypass leading to arbitrary code execution in Deno

Action: Upgrade deno to 1.20.3 or later.

cargo update -p deno --precise 1.20.3

Affected

Fixed versions

Sources

• osv: GHSA-838h-jqp6-cf2f
• https://github.com/denoland/deno/security/advisories/GHSA-838h-jqp6-cf2f
• https://nvd.nist.gov/vuln/detail/CVE-2022-24783
• https://github.com/denoland/deno/pull/14115
• https://github.com/denoland/deno/commit/fcfce1bb869fddc629e6d889d6ba1328b80b0dcf
• https://github.com/denoland/deno
• https://github.com/denoland/deno/compare/v1.20.2...v1.20.3
• https://github.com/denoland/deno/releases/tag/v1.20.3

CVE-2022-24783 · published 2022-03-29T22:10:10Z · modified 2023-11-08T04:08:36.288044Z · JSON