{"action":"Upgrade deno to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0"}],"component":"deno","cve_ids":["CVE-2026-22863"],"ecosystem":"deno","exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-5379-f5hf-w38v","id":"tcs_01M5K4YQHEFDRS43YGK0CX2VRD","modified_at":"2026-01-15T22:40:46Z","published_at":"2026-01-15T22:40:46Z","references":["https://github.com/denoland/deno/security/advisories/GHSA-5379-f5hf-w38v","https://www.cve.org/CVERecord?id=CVE-2026-22863"],"severity":{"label":"critical","score":9.2},"sources":[{"source":"deno-runtime","source_id":"GHSA-5379-f5hf-w38v","url":"https://github.com/denoland/deno/security/advisories/GHSA-5379-f5hf-w38v"}],"summary":"`node:crypto` doesn't finalize cipher"}