{"action":"Upgrade deno to 1.29.3 or later.","affected":[{"fixed":"1.29.3","introduced":"1.9.0"}],"component":"deno","cve_ids":["CVE-2023-22499"],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.29.3"],"ghsa_id":"GHSA-mc52-jpm2-cqh6","id":"tcs_01M5KF1MXXGBCG1CE576KPZGSG","modified_at":"2026-09-10T03:49:51.343760775Z","published_at":"2023-01-20T16:56:40Z","references":["https://osv.dev/vulnerability/GHSA-mc52-jpm2-cqh6","https://github.com/denoland/deno/security/advisories/GHSA-mc52-jpm2-cqh6","https://nvd.nist.gov/vuln/detail/CVE-2023-22499","https://github.com/denoland/deno/pull/17392","https://github.com/denoland/deno"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-mc52-jpm2-cqh6","url":"https://osv.dev/vulnerability/GHSA-mc52-jpm2-cqh6"}],"summary":"Deno is vulnerable to race condition via interactive permission prompt spoofing"}