Deno Land deno_runtime 0.114.0 for Rust
Approved changes feed: RSS · Atom
cpe:2.3:a:deno:deno_runtime:0.114.0:*:*:*:*:rust:*:*
part: a version: 0.114.0 update: *
| Vendor | Deno (d5afa7ad-1b4a-5b28-9776-7b90d94bc7bf) |
|---|---|
| Product | Deno Runtime (4d82d55d-5b34-5bc7-90bb-a636b646cf07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | rust |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/denoland/deno |
purl2cpe | 2026-06-01 10:12:51.725506 |
pkg:golang/github.com/denoland/deno |
purl2cpe | 2026-06-01 10:12:51.725507 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-33966 |
vulnerable | 2026-06-08 06:06:24.099853 |
Deno missing "--allow-net" permission check for built-in Node modules
HIGH (8.6)
Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and deno_runtime 0.114.0, outbound HTTP requests made using the built-in `node:http` or `node:https` modules are incorrectly not checked against the network permission allow list (`--allow-net`). Dependencies relying on these built-in modules are subject to the vulnerability too. Users of Deno versions prior to 1.34.0 are unaffected. Deno Deploy users are unaffected. This problem has been patched in Deno v1.34.1 and deno_runtime 0.114.1 and all users are recommended to update to this version. No workaround is available for this issue.
Published: 2023-05-31T17:15:13.791Z
Updated: 2025-01-09T20:24:06.794Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.