CVE-2024-27936
3 advisories.
deno/deno CVE-2024-27936: medium 6.5
Interactive permission prompt spoofing via improper ANSI stripping
Action: Upgrade deno to 1.41.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.32.1 | 1.41.0 | - |
Fixed versions
| 1.41.0 |
Sources
- deno-runtime: GHSA-m4pq-fv2w-6hrw
- nvd: CVE-2024-27936
- https://www.cve.org/CVERecord?id=CVE-2024-27936
CVE-2024-27936 · published · modified · JSON
crates.io/deno CVE-2024-27936: high 8.8
Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping
Action: Upgrade deno to 1.41.0 or later.
cargo update -p deno --precise 1.41.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.32.1 | 1.41.0 | - |
Fixed versions
| 1.41.0 |
Sources
- osv: GHSA-m4pq-fv2w-6hrw
- https://github.com/denoland/deno/security/advisories/GHSA-m4pq-fv2w-6hrw
- https://nvd.nist.gov/vuln/detail/CVE-2024-27936
- https://github.com/denoland/deno/commit/78d430103a8f6931154ddbbe19d36f3b8630286d
- https://github.com/denoland/deno/commit/7e6b94231290020b55f1d08fb03ea8132781abc5
- https://github.com/denoland/deno
CVE-2024-27936 · published · modified · JSON
crates.io/deno_runtime CVE-2024-27936: high 8.8
Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping
Action: Upgrade deno_runtime to 0.147.0 or later.
cargo update -p deno_runtime --precise 0.147.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.103.0 | 0.147.0 | - |
Fixed versions
| 0.147.0 |
Sources
- osv: GHSA-m4pq-fv2w-6hrw#crates.io/deno_runtime
- https://github.com/denoland/deno/security/advisories/GHSA-m4pq-fv2w-6hrw
- https://nvd.nist.gov/vuln/detail/CVE-2024-27936
- https://github.com/denoland/deno/commit/78d430103a8f6931154ddbbe19d36f3b8630286d
- https://github.com/denoland/deno/commit/7e6b94231290020b55f1d08fb03ea8132781abc5
- https://github.com/denoland/deno
CVE-2024-27936 · published · modified · JSON