tocsin

CVE-2025-48888

3 advisories.

deno/deno CVE-2025-48888: low

deno run with --allow-read and --deny-read flags results in allowed

Action: Upgrade deno to 2.1.13 (2.1.x), 2.2.13 (2.2.x) or 2.3.3 or later.

Affected

introducedfixedlast affected
1.41.32.1.13-
2.2.02.2.13-
2.3.02.3.3-

Fixed versions

2.1.132.2.132.3.3

Sources

CVE-2025-48888 · published · modified · JSON

crates.io/deno CVE-2025-48888: medium 5.3

Deno run with --allow-read and --deny-read flags results in allowed

Action: Upgrade deno to 2.1.13 or later.

cargo update -p deno --precise 2.1.13
cargo update -p deno --precise 2.2.13
cargo update -p deno --precise 2.3.2

Affected

introducedfixedlast affected
1.41.32.1.13-
2.2.02.2.13-
2.3.02.3.2-

Fixed versions

2.1.132.2.132.3.2

Sources

CVE-2025-48888 · published · modified · JSON

crates.io/deno_runtime CVE-2025-48888: medium 5.3

Deno run with --allow-read and --deny-read flags results in allowed

Action: Upgrade deno_runtime to 0.212.0 or later.

cargo update -p deno_runtime --precise 0.212.0

Affected

introducedfixedlast affected
0.150.00.212.0-

Fixed versions

0.212.0

Sources

CVE-2025-48888 · published · modified · JSON