{"action":"Upgrade deno to 2.1.13 (2.1.x) or 2.2.13 or later.","affected":[{"fixed":"2.1.13","introduced":"0"},{"fixed":"2.2.13","introduced":"2.2.0"}],"component":"deno","cve_ids":["CVE-2025-48934"],"ecosystem":"deno","exploited":false,"fixed_versions":["2.1.13","2.2.13"],"ghsa_id":"GHSA-7w8p-chxq-2789","id":"tcs_01M5K4YMX8926KAXJEB5TFJXX6","modified_at":"2025-06-03T21:04:23Z","published_at":"2025-06-03T21:04:23Z","references":["https://github.com/denoland/deno/security/advisories/GHSA-7w8p-chxq-2789","https://www.cve.org/CVERecord?id=CVE-2025-48934"],"severity":{"label":"medium"},"sources":[{"source":"deno-runtime","source_id":"GHSA-7w8p-chxq-2789","url":"https://github.com/denoland/deno/security/advisories/GHSA-7w8p-chxq-2789"}],"summary":"Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables"}