{"action":"Upgrade deno to 1.40.4 or later.","affected":[{"fixed":"1.40.4","introduced":"1.8.0"}],"component":"deno","cve_ids":["CVE-2024-27932"],"ecosystem":"crates.io","epss":0.00594,"exploited":false,"fixed_versions":["1.40.4"],"ghsa_id":"GHSA-5frw-4rwq-xhcr","id":"tcs_01M5KET1757QKDT9SF9JHNSHK0","modified_at":"2026-09-10T03:50:10.161608939Z","published_at":"2024-03-06T17:03:36Z","references":["https://osv.dev/vulnerability/GHSA-5frw-4rwq-xhcr","https://github.com/denoland/deno/security/advisories/GHSA-5frw-4rwq-xhcr","https://nvd.nist.gov/vuln/detail/CVE-2024-27932","https://github.com/denoland/deno/commit/de23e3b60b066481cc390f459497d5bef42a899b","https://github.com/denoland/deno","https://github.com/denoland/deno/blob/3f4639c330a31741b0efda2f93ebbb833f4f95bc/cli/auth_tokens.rs#L89"],"severity":{"label":"medium","score":4.6},"sources":[{"source":"osv","source_id":"GHSA-5frw-4rwq-xhcr","url":"https://osv.dev/vulnerability/GHSA-5frw-4rwq-xhcr"}],"summary":"Deno's improper suffix match testing for DENO_AUTH_TOKENS"}