{"action":"Upgrade deno to 2.7.14 or later.","affected":[{"fixed":"2.7.14","introduced":"0"}],"component":"deno","cve_ids":["CVE-2026-49401"],"ecosystem":"deno","exploited":false,"fixed_versions":["2.7.14"],"ghsa_id":"GHSA-8xpq-cjcf-3wh9","id":"tcs_01M5K4YWT4NXHXJ4JDSEKQF1N1","modified_at":"2026-05-30T03:04:18Z","published_at":"2026-05-27T13:14:18Z","references":["https://github.com/denoland/deno/security/advisories/GHSA-8xpq-cjcf-3wh9","https://www.cve.org/CVERecord?id=CVE-2026-49401"],"severity":{"label":"high","score":7.3},"sources":[{"source":"deno-runtime","source_id":"GHSA-8xpq-cjcf-3wh9","url":"https://github.com/denoland/deno/security/advisories/GHSA-8xpq-cjcf-3wh9"}],"summary":"Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)"}