crates.io/deno CVE-2026-49411: medium 6.5

Deno: Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks

Action: Upgrade deno to 2.8.0 or later.

cargo update -p deno --precise 2.8.0

Affected

Fixed versions

Sources

• osv: GHSA-v8fw-85r8-5m23
• https://github.com/denoland/deno/security/advisories/GHSA-v8fw-85r8-5m23
• https://nvd.nist.gov/vuln/detail/CVE-2026-49411
• https://github.com/denoland/deno

CVE-2026-49411 · published 2026-06-16T19:09:46Z · modified 2026-07-20T21:15:24.468677448Z · JSON