crates.io/deno_runtime CVE-2024-27936: high 8.8
Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping
Action: Upgrade deno_runtime to 0.147.0 or later.
cargo update -p deno_runtime --precise 0.147.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.103.0 | 0.147.0 | - |
Fixed versions
| 0.147.0 |
Sources
- osv: GHSA-m4pq-fv2w-6hrw#crates.io/deno_runtime
- https://github.com/denoland/deno/security/advisories/GHSA-m4pq-fv2w-6hrw
- https://nvd.nist.gov/vuln/detail/CVE-2024-27936
- https://github.com/denoland/deno/commit/78d430103a8f6931154ddbbe19d36f3b8630286d
- https://github.com/denoland/deno/commit/7e6b94231290020b55f1d08fb03ea8132781abc5
- https://github.com/denoland/deno
CVE-2024-27936 · published · modified · JSON