crates.io/deno CVE-2024-27936: high 8.8, EPSS 0.94%
Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping
Action: Upgrade deno to 1.41.0 or later.
cargo update -p deno --precise 1.41.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.32.1 | 1.41.0 | - |
Fixed versions
| 1.41.0 |
Sources
- osv: GHSA-m4pq-fv2w-6hrw
- https://github.com/denoland/deno/security/advisories/GHSA-m4pq-fv2w-6hrw
- https://nvd.nist.gov/vuln/detail/CVE-2024-27936
- https://github.com/denoland/deno/commit/78d430103a8f6931154ddbbe19d36f3b8630286d
- https://github.com/denoland/deno/commit/7e6b94231290020b55f1d08fb03ea8132781abc5
- https://github.com/denoland/deno
CVE-2024-27936 · published · modified · JSON