{"action":"Upgrade deno_runtime to 0.212.0 or later.","affected":[{"fixed":"0.212.0","introduced":"0"}],"component":"deno_runtime","cve_ids":["CVE-2025-48934"],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.212.0"],"ghsa_id":"GHSA-7w8p-chxq-2789","id":"tcs_01M5KEVFX43JCWF0W9VQQ91QV4","modified_at":"2026-09-10T03:50:24.980985533Z","published_at":"2025-06-04T21:18:18Z","references":["https://osv.dev/vulnerability/GHSA-7w8p-chxq-2789","https://github.com/denoland/deno/security/advisories/GHSA-7w8p-chxq-2789","https://nvd.nist.gov/vuln/detail/CVE-2025-48934","https://github.com/denoland/deno/pull/29079","https://github.com/denoland/deno/commit/2959e083912420988066a001c2b2d6732a1b562f","https://github.com/denoland/deno/commit/946ccda1aa19a00c478a5e6826b75053b050d753","https://docs.deno.com/api/deno/~/Deno.Env.toObject","https://docs.deno.com/runtime/fundamentals/security/#environment-variables","https://github.com/denoland/deno"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-7w8p-chxq-2789#crates.io/deno_runtime","url":"https://osv.dev/vulnerability/GHSA-7w8p-chxq-2789"}],"summary":"Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables"}