Deno_jll
JLSEC-2026-658High 7.4UpstreamDeno: Miller-Rabin Primality Test Allows Zero RoundsJLSEC-2026-657Medium 5.5UpstreamDeno: BYONM module resolution allows `package.json` main path traversal to bypass `--allo…JLSEC-2026-656High 8.1UpstreamDeno: Command Injection via spawnSync & spawn on WindowsJLSEC-2026-655High 8.4UpstreamDeno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)JLSEC-2026-654Critical 9.1UpstreamDeno's TLS retry copies stale upgrade hook, risking plaintext trafficJLSEC-2026-116Critical 9.8UpstreamDeno has a Command Injection via Incomplete shell metacharacter blocklist in `node:child_…JLSEC-2026-115Critical 9.8UpstreamDeno has an incomplete fix for command-injection prevention on Windows — case-insensiti…JLSEC-2026-114Critical 9.2UpstreamDeno node:crypto doesn't finalize cipherJLSEC-2026-113High 8.1UpstreamDeno is Vulnerable to Command Injection on Windows During Batch File ExecutionJLSEC-2026-112Low 3.3UpstreamDeno's --deny-read check does not prevent permission bypassJLSEC-2026-111Low 3.3UpstreamDeno's --deny-write check does not prevent permission bypassJLSEC-2026-110Medium 5.5UpstreamDeno.env.toObject() ignores the variables listed in --deny-env and returns all environmen…JLSEC-2026-109Medium 5.5UpstreamDeno run with --allow-read and --deny-read flags results in allowedJLSEC-2026-108High 7.7UpstreamDeno's AES GCM authentication tags are not verifiedJLSEC-2026-107Critical 9.0UpstreamDeno permission escalation vulnerability via open of privileged files with missing `--den…JLSEC-2026-106High 7.4UpstreamNo summary availableJLSEC-2026-105Medium 6.5UpstreamDeno's `deno_runtime` vulnerable to interactive permission prompt spoofing via improper A…JLSEC-2026-104Medium 4.6UpstreamDeno's improper suffix match testing for `DENO_AUTH_TOKENS`JLSEC-2026-103Medium 6.5UpstreamInsufficient permission checking in `Deno.makeTemp*` APIsJLSEC-2026-102High 8.8UpstreamInteractive `run` permission prompt spoofing via improper ANSI neutralizationJLSEC-2026-101High 7.5UpstreamNo summary availableJLSEC-2026-100High 7.5UpstreamDeno is vulnerable to race condition via interactive permission prompt spoofingJLSEC-2026-99High 8.4UpstreamNo summary availableJLSEC-2026-98Critical 9.8UpstreamDeno's static imports inside dynamically imported modules do not adhere to permission che…