PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
deno --allow-read / --allow-write permission bypass in `node:sqlite` Unknown 1 year ago 2 hours ago
z-deno-truth-va499w Malicious code in z-deno-truth-va499w (npm) Unknown 19 days ago 12 days ago
z-deno-truth-ya1t4m Malicious code in z-deno-truth-ya1t4m (npm) Unknown 19 days ago 12 days ago
z-deno-truth-bwhlsz Malicious code in z-deno-truth-bwhlsz (npm) Unknown 19 days ago 19 days ago
@remix-run/deno React Router has Path Traversal in File Session Storage Critical 9.1 9 months ago 23 days ago
deno Deno run with --allow-read and --deny-read flags results in allowed Medium Risk 5.3 1 year ago 1 month ago
deno_runtime Deno run with --allow-read and --deny-read flags results in allowed Medium Risk 5.3 1 year ago 1 month ago
deno Deno's AES GCM authentication tags are not verified High Risk 8.0 1 year ago 1 month ago
deno_node Deno's AES GCM authentication tags are not verified High Risk 8.0 1 year ago 1 month ago
deno Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables Medium Risk 5.3 1 year ago 1 month ago
deno_runtime Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables Medium Risk 5.3 1 year ago 1 month ago
deno Deno permission escalation vulnerability via open of privileged files with missing `--deny` flag High Risk 8.4 2 years ago 1 month ago
deno Deno's improper suffix match testing for DENO_AUTH_TOKENS Medium Risk 4.6 2 years ago 1 month ago
deno Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass High Risk 8.2 2 years ago 1 month ago
deno Insufficient permission checking in `Deno.makeTemp*` APIs Medium Risk 5.8 2 years ago 1 month ago
deno Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping High Risk 8.8 2 years ago 1 month ago
deno_runtime Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping High Risk 8.8 2 years ago 1 month ago
deno Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination High Risk 7.2 2 years ago 1 month ago
deno Missing "--allow-net" permission check for built-in Node modules High Risk 8.6 3 years ago 1 month ago
deno_runtime Missing "--allow-net" permission check for built-in Node modules High Risk 8.6 3 years ago 1 month ago
deno Interactive `run` permission prompt spoofing via improper ANSI neutralization High Risk 8.8 3 years ago 1 month ago
deno_runtime Interactive `run` permission prompt spoofing via improper ANSI neutralization High Risk 8.8 3 years ago 1 month ago
deno Deno is vulnerable to race condition via interactive permission prompt spoofing High Risk 8.8 3 years ago 1 month ago
deno Deno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS) High Risk 7.3 3 months ago 2 months ago
activerecord_denormalize Malicious code in activerecord_denormalize (RubyGems) Unknown 2 years ago 2 months ago
deno Deno: Command Injection via spawnSync & spawn on Windows High Risk 8.1 3 months ago 2 months ago
deno Deno: WebSocket API sandbox bypass via missing post-DNS check Medium Risk 5.2 3 months ago 2 months ago
deno Deno: `fetch()` API sandbox bypass via missing DNS resolution check Medium Risk 5.2 3 months ago 2 months ago
deno Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access Medium Risk 5.2 3 months ago 2 months ago
deno Deno: Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks Medium Risk 6.5 3 months ago 2 months ago
deno Deno's TLS retry copies stale upgrade hook, risking plaintext traffic High Risk 7.4 4 months ago 2 months ago
deno Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions Medium Risk 5.5 3 months ago 2 months ago
deno Deno's static imports inside dynamically imported modules do not adhere to permission checks Critical 9.8 5 years ago 3 months ago
deno Deno: Denial of service via non-ASCII bytes in WebSocket response headers Medium Risk 4.3 3 months ago 3 months ago
deno Deno: Miller-Rabin Primality Test Allows Zero Rounds High Risk 7.4 3 months ago 3 months ago
deno Deno vulnerable to command Injection via incomplete shell metacharacter blocklist in node:child_process High Risk 8.1 7 months ago 7 months ago
deno Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process High Risk 8.1 7 months ago 7 months ago
deno *const c_void / ExternalPointer unsoundness leading to use-after-free High Risk 8.4 2 years ago 7 months ago
deno Deno node:crypto doesn't finalize cipher Critical 9.5 8 months ago 8 months ago
deno Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass High Risk 8.1 8 months ago 8 months ago
deno Deno has --allow-read / --allow-write permission bypass in `node:sqlite` Critical 9.1 1 year ago 8 months ago
deno_node Deno has --allow-read / --allow-write permission bypass in `node:sqlite` Critical 9.1 1 year ago 8 months ago
denomenallib Malicious code in denomenallib (PyPI) Unknown 1 year ago 10 months ago
deno Deno's --deny-write check does not prevent permission bypass Low Risk 3.3 1 year ago 12 months ago
deno Deno is Vulnerable to Command Injection on Windows During Batch File Execution High Risk 8.1 1 year ago 1 year ago
deno Deno's --deny-read check does not prevent permission bypass Low Risk 3.3 1 year ago 1 year ago
deno-r4-basic Malicious code in deno-r4-basic (npm) Unknown 1 year ago 1 year ago
deno Deno vulnerable to Exposure of Sensitive Information to an Unauthorized Actor Medium Risk 5.3 1 year ago 1 year ago
deno fetch: Authorization headers not dropped when redirecting cross-origin High Risk 7.5 1 year ago 1 year ago
deno_fetch fetch: Authorization headers not dropped when redirecting cross-origin High Risk 7.5 1 year ago 1 year ago
Data courtesy of OSV.dev
Page 1