crates.io/deno CVE-2026-49401: high 7.3, EPSS 0.20%

Deno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)

Action: Upgrade deno to 2.7.14 or later.

cargo update -p deno --precise 2.7.14

Affected

Fixed versions

Sources

• osv: GHSA-8xpq-cjcf-3wh9
• https://github.com/denoland/deno/security/advisories/GHSA-8xpq-cjcf-3wh9
• https://nvd.nist.gov/vuln/detail/CVE-2026-49401
• https://github.com/denoland/deno

CVE-2026-49401 · published 2026-06-16T19:11:52Z · modified 2026-07-31T13:30:13.004518390Z · JSON