crates.io/deno_node CVE-2025-48935: critical 9.1, EPSS 0.47%

Deno has --allow-read / --allow-write permission bypass in `node:sqlite`

Action: Upgrade deno_node to 0.134.0 or later.

cargo update -p deno_node --precise 0.134.0

Affected

Fixed versions

Sources

• osv: GHSA-8vxj-4cph-c596#crates.io/deno_node
• https://github.com/denoland/deno/security/advisories/GHSA-8vxj-4cph-c596
• https://nvd.nist.gov/vuln/detail/CVE-2025-48935
• https://github.com/denoland/deno/commit/31a97803995bd94629528ba841b2418d3ca01860
• https://github.com/denoland/deno
• https://rustsec.org/advisories/RUSTSEC-2025-0138.html

CVE-2025-48935 · published 2025-06-04T21:22:27Z · modified 2026-02-03T03:15:55.367476Z · JSON