Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5.2 CVE-2026-49860

Deno: WebSocket API sandbox bypass via missing post-DNS check_CVE-2026-49860

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when a WebSocket connection was opened, Deno checked the destination hos...

denoland deno < 2.8.1 CVE
MEDIUM 5.2 CVE-2026-49859

Deno: `fetch()` API sandbox bypass via missing DNS resolution check_CVE-2026-49859

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when fetch() was called, Deno checked the destination hostname against -...

denoland deno < 2.8.1 CVE
HIGH 7.4 CVE-2026-49440

Deno: Miller-Rabin Primality Test Allows Zero Rounds_CVE-2026-49440

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.checkPrime(candidate[, options][, callback]) and crypto.chec...

denoland deno < 2.8.1 CVE
MEDIUM 6.5 CVE-2026-49411

Deno Node TCPWrap numeric hostname aliases bypass –deny-net resolved-IP deny checks_CVE-2026-49411

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.0, the Node.js compatibility TCP path checked the permission against the or...

denoland deno < 2.8.0 CVE
MEDIUM 5.5 CVE-2026-49406

Deno: BYONM module resolution allows `package.json` main path traversal to bypass `–allow-read` restrictions_CVE-2026-49406

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.12, when Deno was run in BYONM mode (nodeModulesDir: "manual"), the module ...

denoland deno < 2.7.12 CVE
HIGH 8.1 CVE-2026-49402

Deno: Command Injection via spawnSync & spawn on Windows_CVE-2026-49402

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno's node:child_process implementation provided an escapeShellArg() h...

denoland deno < 2.7.10 CVE
HIGH 7.3 CVE-2026-49401

Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)_CVE-2026-49401

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.14, Deno's permission system enforces filesystem and execution restrictions...

denoland deno < 2.7.14 CVE
HIGH 7.4 CVE-2026-44726

Deno: TLS retry copies stale upgrade hook, risking plaintext traffic_CVE-2026-44726

Deno is a JavaScript, TypeScript, and WebAssembly runtime. From 2.0.0 until 2.7.8, a flaw in Deno's Node.js tls compatibility layer could cause a T...

denoland deno >= 2.0.0, < 2.7.8 CVE
HIGH 7.1 CVE-2025-71382

MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering_CVE-2025-71382

MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a d...

ArtifexSoftware mupdf CVE
HIGH 7.5 CVE-2025-61029

CVE-2025-61029_CVE-2025-61029

An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL st...

n/a n/a n/a CVE