crates.io/deno CVE-2023-33966: high 8.6
Missing "--allow-net" permission check for built-in Node modules
Action: Upgrade deno to 1.34.1 or later.
cargo update -p deno --precise 1.34.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.34.0 | 1.34.1 | - |
Fixed versions
| 1.34.1 |
Sources
- osv: GHSA-vc52-gwm3-8v2f
- https://github.com/denoland/deno/security/advisories/GHSA-vc52-gwm3-8v2f
- https://nvd.nist.gov/vuln/detail/CVE-2023-33966
- https://github.com/denoland/deno
- https://github.com/denoland/deno/releases/tag/v1.34.1
CVE-2023-33966 · published · modified · JSON