CVE-2026-27190
2 advisories.
deno/deno CVE-2026-27190: high 8.1
Command Injection via Incomplete shell metacharacter blocklist in `node:child_process`
Action: Upgrade deno to 2.6.8 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.6.7 | 2.6.8 | - |
Fixed versions
| 2.6.8 |
Sources
CVE-2026-27190 · published · modified · JSON
crates.io/deno CVE-2026-27190: high 8.1
Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process
Action: Upgrade deno to 2.6.8 or later.
cargo update -p deno --precise 2.6.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.8 | - |
Fixed versions
| 2.6.8 |
Sources
- osv: GHSA-hmh4-3xvx-q5hr
- https://github.com/denoland/deno/security/advisories/GHSA-hmh4-3xvx-q5hr
- https://nvd.nist.gov/vuln/detail/CVE-2026-27190
- https://github.com/denoland/deno/commit/9132ad958c83a0d0b199de12b69b877f63edab4c
- https://github.com/denoland/deno
- https://github.com/denoland/deno/releases/tag/v2.6.8
CVE-2026-27190 · published · modified · JSON