crates.io/deno CVE-2025-61787: high 8.1

Deno is Vulnerable to Command Injection on Windows During Batch File Execution

Action: Upgrade deno to 2.5.2 or later.

cargo update -p deno --precise 2.5.2

Affected

Fixed versions

Sources

• osv: GHSA-m2gf-x3f6-8hq3
• https://github.com/denoland/deno/security/advisories/GHSA-m2gf-x3f6-8hq3
• https://nvd.nist.gov/vuln/detail/CVE-2025-61787
• https://github.com/denoland/deno/pull/30818
• https://github.com/denoland/deno/commit/8a0990ccd37bafd8768176ca64b906ba2da2d822
• https://github.com/denoland/deno
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.2

CVE-2025-61787 · published 2025-10-08T18:16:24Z · modified 2025-10-08T18:42:29.570571Z · JSON