{"action":"Upgrade deno to 1.39.1 or later.","affected":[{"fixed":"1.39.1","introduced":"1.39.0"}],"component":"deno","cve_ids":["CVE-2024-27933"],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.39.1"],"ghsa_id":"GHSA-6q4w-9x56-rmwq","id":"tcs_01M5KETRYZAWEVETM8M1ENHPCE","modified_at":"2026-09-10T03:50:10.304548338Z","published_at":"2024-03-06T17:04:08Z","references":["https://osv.dev/vulnerability/GHSA-6q4w-9x56-rmwq","https://github.com/denoland/deno/security/advisories/GHSA-6q4w-9x56-rmwq","https://nvd.nist.gov/vuln/detail/CVE-2024-27933","https://github.com/denoland/deno/commit/55fac9f5ead6d30996400e8597c969b675c5a22b","https://github.com/denoland/deno/commit/5a91a065b882215dde209baf626247e54c21a392","https://github.com/denoland/deno","https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L214","https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L220","https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L225","https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L241","https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L256","https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L265","https://github.com/denoland/deno/blob/v1.39.0/runtime/permissions/prompter.rs#L99"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-6q4w-9x56-rmwq","url":"https://osv.dev/vulnerability/GHSA-6q4w-9x56-rmwq"}],"summary":"Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass"}