CVE-2023-33966
3 advisories.
deno/deno CVE-2023-33966: critical 9.8
Missing "--allow-net" permission check for built-in Node modules
Action: Upgrade deno to 1.34.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.34.0 | 1.34.1 | - |
Fixed versions
| 1.34.1 |
Sources
- deno-runtime: GHSA-vc52-gwm3-8v2f
- nvd: CVE-2023-33966
- https://www.cve.org/CVERecord?id=CVE-2023-33966
CVE-2023-33966 · published · modified · JSON
crates.io/deno CVE-2023-33966: high 8.6
Missing "--allow-net" permission check for built-in Node modules
Action: Upgrade deno to 1.34.1 or later.
cargo update -p deno --precise 1.34.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.34.0 | 1.34.1 | - |
Fixed versions
| 1.34.1 |
Sources
- osv: GHSA-vc52-gwm3-8v2f
- https://github.com/denoland/deno/security/advisories/GHSA-vc52-gwm3-8v2f
- https://nvd.nist.gov/vuln/detail/CVE-2023-33966
- https://github.com/denoland/deno
- https://github.com/denoland/deno/releases/tag/v1.34.1
CVE-2023-33966 · published · modified · JSON
crates.io/deno_runtime CVE-2023-33966: high 8.6
Missing "--allow-net" permission check for built-in Node modules
Action: Upgrade deno_runtime to 0.115.0 or later.
cargo update -p deno_runtime --precise 0.115.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.114.0 | 0.115.0 | - |
Fixed versions
| 0.115.0 |
Sources
- osv: GHSA-vc52-gwm3-8v2f#crates.io/deno_runtime
- https://github.com/denoland/deno/security/advisories/GHSA-vc52-gwm3-8v2f
- https://nvd.nist.gov/vuln/detail/CVE-2023-33966
- https://github.com/denoland/deno
- https://github.com/denoland/deno/releases/tag/v1.34.1
CVE-2023-33966 · published · modified · JSON