crates.io/deno CVE-2025-61785: low 3.3, EPSS 0.20%

Deno's --deny-write check does not prevent permission bypass

Action: Upgrade deno to 2.5.3 or later.

cargo update -p deno --precise 2.5.3

Affected

Fixed versions

Sources

• osv: GHSA-vg2r-rmgp-cgqj
• https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj
• https://nvd.nist.gov/vuln/detail/CVE-2025-61785
• https://github.com/denoland/deno/pull/30872
• https://github.com/denoland/deno/commit/992e998dfe436cdc9325232759af8be92f11739b
• https://github.com/denoland/deno
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

CVE-2025-61785 · published 2025-10-07T22:36:36Z · modified 2025-10-13T15:17:42Z · JSON