crates.io/deno_runtime CVE-2023-33966: high 8.6

Missing "--allow-net" permission check for built-in Node modules

Action: Upgrade deno_runtime to 0.115.0 or later.

cargo update -p deno_runtime --precise 0.115.0

Affected

Fixed versions

Sources

• osv: GHSA-vc52-gwm3-8v2f#crates.io/deno_runtime
• https://github.com/denoland/deno/security/advisories/GHSA-vc52-gwm3-8v2f
• https://nvd.nist.gov/vuln/detail/CVE-2023-33966
• https://github.com/denoland/deno
• https://github.com/denoland/deno/releases/tag/v1.34.1

CVE-2023-33966 · published 2023-05-31T23:39:40Z · modified 2026-09-10T03:50:08.169778794Z · JSON