{"action":"Upgrade deno to 1.31.2 or later.","affected":[{"fixed":"1.31.2","introduced":"1.8.0"}],"component":"deno","cve_ids":["CVE-2023-28446"],"ecosystem":"deno","exploited":false,"fixed_versions":["1.31.2"],"ghsa_id":"GHSA-vq67-rp93-65qf","id":"tcs_01M5K4Y9TDZNN7G6NVC1C1MBE3","modified_at":"2023-03-24T15:49:05Z","published_at":"2023-03-23T23:31:40Z","references":["https://github.com/denoland/deno/security/advisories/GHSA-vq67-rp93-65qf","https://www.cve.org/CVERecord?id=CVE-2023-28446"],"severity":{"label":"high","score":8.8},"sources":[{"source":"deno-runtime","source_id":"GHSA-vq67-rp93-65qf","url":"https://github.com/denoland/deno/security/advisories/GHSA-vq67-rp93-65qf"}],"summary":"Interactive `run` permission prompt spoofing via improper ANSI neutralization"}