Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-48935

Fixed upstream EPSS <1%CVSS 5.5

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 2.2.0 and prior to versions 2.2.5, it is possible to bypass Deno's permission read/write db permission check by using `ATTACH DATABASE` statement. Version 2.2.5 contains a patch for the issue.

Published 2025-06-04 · CVE record · OSV

Products: denoland deno

Fixed upstream

EcosystemPackageFixed in
crates.iodeno2.2.5
crates.iodeno_node0.134.0