{"action":"Upgrade deno to 1.43.1 or later.","affected":[{"fixed":"1.43.1","introduced":"0"}],"component":"deno","cve_ids":["CVE-2024-34346"],"ecosystem":"deno","exploited":false,"fixed_versions":["1.43.1"],"ghsa_id":"GHSA-23rx-c3g5-hv9w","id":"tcs_01M5K4YJBF4ZXNEQBX48BAR135","modified_at":"2024-05-07T20:42:59Z","published_at":"2024-05-07T20:42:59Z","references":["https://github.com/denoland/deno/security/advisories/GHSA-23rx-c3g5-hv9w","https://www.cve.org/CVERecord?id=CVE-2024-34346"],"severity":{"label":"high","score":8.4},"sources":[{"source":"deno-runtime","source_id":"GHSA-23rx-c3g5-hv9w","url":"https://github.com/denoland/deno/security/advisories/GHSA-23rx-c3g5-hv9w"}],"summary":"Permission escalation via open of privileged files with missing `--deny` flag"}