{"action":"Upgrade deno to 2.1.13 (2.1.x), 2.2.13 (2.2.x) or 2.3.3 or later.","affected":[{"fixed":"2.1.13","introduced":"1.41.3"},{"fixed":"2.2.13","introduced":"2.2.0"},{"fixed":"2.3.3","introduced":"2.3.0"}],"component":"deno","cve_ids":["CVE-2025-48888"],"ecosystem":"deno","exploited":false,"fixed_versions":["2.1.13","2.2.13","2.3.3"],"ghsa_id":"GHSA-xqxc-x6p3-w683","id":"tcs_01M5K4YM1CZHNM6CGQ46NKWSC0","modified_at":"2026-03-16T21:13:52Z","published_at":"2025-06-03T20:55:58Z","references":["https://github.com/denoland/deno/security/advisories/GHSA-xqxc-x6p3-w683","https://www.cve.org/CVERecord?id=CVE-2025-48888"],"severity":{"label":"low"},"sources":[{"source":"deno-runtime","source_id":"GHSA-xqxc-x6p3-w683","url":"https://github.com/denoland/deno/security/advisories/GHSA-xqxc-x6p3-w683"}],"summary":"deno run with --allow-read and --deny-read flags results in allowed"}