deno kayıtları
deno üreticisine ait 39 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %94,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-863 Incorrect Authorization5
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-269 Improper Privilege Management3
- CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences2
- CWE-325 Missing Cryptographic Step2
- CWE-20 Improper Input Validation2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
39 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-27190İstismar yok | Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_processdeno · deno · CWE-78 | Kritik9,8 | — | %3,2 | 20 Şub 2026 |
40Planlayın | CVE-2021-42139İstismar yok | Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations.deno · deno standard modules · CWE-94 | Kritik9,8 | — | %2,1 | 11 Eki 2021 |
40Planlayın | CVE-2026-32260İstismar yok | Command Injection via incomplete shell metacharacter blocklist in node:child_process (bypass of CVE-2026-27190 fix)deno · deno · CWE-78 | Kritik9,8 | — | %2,0 | 12 Mar 2026 |
40Planlayın | CVE-2022-24783İstismar yok | Sandbox bypass leading to arbitrary code execution in Denodeno · deno · CWE-269 | Kritik10,0 | — | %1,1 | 25 Mar 2022 |
39İzleyin | CVE-2021-32619İstismar yok | Static imports inside dynamically imported modules do not adhere to permission checksdeno · deno · CWE-285 | Kritik9,8 | — | %1,1 | 28 May 2021 |
39İzleyin | CVE-2023-28445İstismar yok | Deno improperly handles resizable ArrayBufferdeno · deno · CWE-125 | Kritik9,8 | — | %1,0 | 23 Mar 2023 |
39İzleyin | CVE-2026-22864İstismar yok | Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypassdeno · deno · CWE-77 | Kritik9,8 | — | %0,7 | 15 Oca 2026 |
39İzleyin | CVE-2023-33966İstismar yok | Deno missing "--allow-net" permission check for built-in Node modulesdeno · deno · CWE-269 | Kritik9,8 | — | %0,6 | 31 May 2023 |
36İzleyin | CVE-2024-27933İstismar yok | Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypassdeno · deno · CWE-863 | Yüksek8,8 | — | %2,3 | 20 Mar 2024 |
36İzleyin | CVE-2024-34346İstismar yok | Deno contains a permission escalation via open of privileged files with missing `--deny` flagdeno · deno · CWE-863 | Kritik9,0 | — | %0,4 | 7 May 2024 |
36İzleyin | CVE-2026-44726İstismar yok | Deno: TLS retry copies stale upgrade hook, risking plaintext trafficdeno · deno · CWE-319 | Kritik9,1 | — | %0,2 | 23 Haz 2026 |
36İzleyin | CVE-2026-22863İstismar yok | Deno node:crypto doesn't finalize cipherdeno · deno · CWE-325 | Kritik9,2 | — | %0,2 | 15 Oca 2026 |
35İzleyin | CVE-2023-28446İstismar yok | Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralizationdeno · deno · CWE-150 | Yüksek8,8 | — | %1,1 | 24 Mar 2023 |
35İzleyin | CVE-2024-27934İstismar yok | *const c_void / ExternalPointer unsoundness leading to use-after-freedeno · deno · CWE-416 | Yüksek8,8 | — | %0,4 | 20 Mar 2024 |
33İzleyin | CVE-2025-61787İstismar yok | Deno is Vulnerable to Command Injection on Windows During Batch File Executiondeno · deno · CWE-77 | Yüksek8,1 | — | %2,1 | 7 Eki 2025 |
33İzleyin | CVE-2024-27935İstismar yok | Deno's Node.js Compatibility Runtime has Cross-Session Data Contaminationdeno · deno · CWE-488 | Yüksek8,3 | — | %0,7 | 20 Mar 2024 |
33İzleyin | CVE-2021-41641İstismar yok | Deno <=1.14.0 file sandbox does not handle symbolic links correctly.deno · deno · CWE-59 | Yüksek8,4 | — | %0,4 | 12 Haz 2022 |
33İzleyin | CVE-2026-49401İstismar yok | Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)deno · deno · CWE-41 | Yüksek8,4 | — | %0,2 | 23 Haz 2026 |
32İzleyin | CVE-2026-49402İstismar yok | Deno: Command Injection via spawnSync & spawn on Windowsdeno · deno · CWE-78 | Yüksek8,1 | — | %0,4 | 23 Haz 2026 |
30İzleyin | CVE-2023-26103İstismar yok | Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket functideno · deno · CWE-1333 | Yüksek7,5 | — | %1,2 | 25 Şub 2023 |
30İzleyin | CVE-2023-22499İstismar yok | Interactive permission prompt spoofing in Denodeno · deno · CWE-362 | Yüksek7,5 | — | %0,6 | 17 Oca 2023 |
30İzleyin | CVE-2025-24015İstismar yok | Deno's AES GCM authentication tags are not verifieddeno · deno · CWE-347 | Yüksek7,7 | — | %0,3 | 3 Haz 2025 |
29İzleyin | CVE-2024-32477İstismar yok | Race condition when flushing input stream leads to permission prompt bypassdeno · deno · CWE-78 | Yüksek7,4 | — | %0,3 | 18 Nis 2024 |
29İzleyin | CVE-2026-49440İstismar yok | Deno: Miller-Rabin Primality Test Allows Zero Roundsdeno · deno · CWE-325 | Yüksek7,4 | — | %0,2 | 23 Haz 2026 |
26İzleyin | CVE-2024-27936İstismar yok | Deno interactive permission prompt spoofing via improper ANSI strippingdeno · deno · CWE-150 | Orta6,5 | — | %0,9 | 20 Mar 2024 |
- CVE-2026-2719040Planlayın
Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process
KritikCVSS 9,8İstismar yokEPSS %3deno · deno20 Şub 2026
- CVE-2021-4213940Planlayın
Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations.
KritikCVSS 9,8İstismar yokEPSS %2deno · deno standard modules11 Eki 2021
- CVE-2026-3226040Planlayın
Command Injection via incomplete shell metacharacter blocklist in node:child_process (bypass of CVE-2026-27190 fix)
KritikCVSS 9,8İstismar yokEPSS %2deno · deno12 Mar 2026
- CVE-2022-2478340Planlayın
Sandbox bypass leading to arbitrary code execution in Deno
KritikCVSS 10,0İstismar yokEPSS %1deno · deno25 Mar 2022
- CVE-2021-3261939İzleyin
Static imports inside dynamically imported modules do not adhere to permission checks
KritikCVSS 9,8İstismar yokEPSS %1deno · deno28 May 2021
- CVE-2023-2844539İzleyin
Deno improperly handles resizable ArrayBuffer
KritikCVSS 9,8İstismar yokEPSS %1deno · deno23 Mar 2023
- CVE-2026-2286439İzleyin
Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass
KritikCVSS 9,8İstismar yokEPSS %1deno · deno15 Oca 2026
- CVE-2023-3396639İzleyin
Deno missing "--allow-net" permission check for built-in Node modules
KritikCVSS 9,8İstismar yokEPSS %1deno · deno31 May 2023
- CVE-2024-2793336İzleyin
Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass
YüksekCVSS 8,8İstismar yokEPSS %2deno · deno20 Mar 2024
- CVE-2024-3434636İzleyin
Deno contains a permission escalation via open of privileged files with missing `--deny` flag
KritikCVSS 9,0İstismar yokEPSS %0deno · deno7 May 2024
- CVE-2026-4472636İzleyin
Deno: TLS retry copies stale upgrade hook, risking plaintext traffic
KritikCVSS 9,1İstismar yokEPSS %0deno · deno23 Haz 2026
- CVE-2026-2286336İzleyin
Deno node:crypto doesn't finalize cipher
KritikCVSS 9,2İstismar yokEPSS %0deno · deno15 Oca 2026
- CVE-2023-2844635İzleyin
Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization
YüksekCVSS 8,8İstismar yokEPSS %1deno · deno24 Mar 2023
- CVE-2024-2793435İzleyin
*const c_void / ExternalPointer unsoundness leading to use-after-free
YüksekCVSS 8,8İstismar yokEPSS %0deno · deno20 Mar 2024
- CVE-2025-6178733İzleyin
Deno is Vulnerable to Command Injection on Windows During Batch File Execution
YüksekCVSS 8,1İstismar yokEPSS %2deno · deno7 Eki 2025
- CVE-2024-2793533İzleyin
Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination
YüksekCVSS 8,3İstismar yokEPSS %1deno · deno20 Mar 2024
- CVE-2021-4164133İzleyin
Deno <=1.14.0 file sandbox does not handle symbolic links correctly.
YüksekCVSS 8,4İstismar yokEPSS %0deno · deno12 Haz 2022
- CVE-2026-4940133İzleyin
Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)
YüksekCVSS 8,4İstismar yokEPSS %0deno · deno23 Haz 2026
- CVE-2026-4940232İzleyin
Deno: Command Injection via spawnSync & spawn on Windows
YüksekCVSS 8,1İstismar yokEPSS %0deno · deno23 Haz 2026
- CVE-2023-2610330İzleyin
Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket functi
YüksekCVSS 7,5İstismar yokEPSS %1deno · deno25 Şub 2023
- CVE-2023-2249930İzleyin
Interactive permission prompt spoofing in Deno
YüksekCVSS 7,5İstismar yokEPSS %1deno · deno17 Oca 2023
- CVE-2025-2401530İzleyin
Deno's AES GCM authentication tags are not verified
YüksekCVSS 7,7İstismar yokEPSS %0deno · deno3 Haz 2025
- CVE-2024-3247729İzleyin
Race condition when flushing input stream leads to permission prompt bypass
YüksekCVSS 7,4İstismar yokEPSS %0deno · deno18 Nis 2024
- CVE-2026-4944029İzleyin
Deno: Miller-Rabin Primality Test Allows Zero Rounds
YüksekCVSS 7,4İstismar yokEPSS %0deno · deno23 Haz 2026
- CVE-2024-2793626İzleyin
Deno interactive permission prompt spoofing via improper ANSI stripping
OrtaCVSS 6,5İstismar yokEPSS %1deno · deno20 Mar 2024