{"api_version":"v1","generated_at":"2026-10-09T00:10:00+00:00","product":{"cve_count":39,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-denoland-deno-69816345a5a4","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/deno","name":"deno","next_cursor":null,"observations":[{"affected":"deno: 2.7.0 \u2264 2.9.7","affected_versions_present":true,"cve_id":"CVE-2026-103473","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-103473","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-02T16:27:05.332Z","patch_url":"","primary_source":"","published":"2026-09-30T17:22:40.337Z"},{"affected":"< 2.7.5","affected_versions_present":true,"cve_id":"CVE-2026-55517","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55517","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T17:52:56.960Z","patch_url":"https://github.com/denoland/deno/security/advisories/GHSA-x2qc-cmh9-f4hf","primary_source":"","published":"2026-06-23T17:24:59.498Z"},{"affected":">= 2.0.0, < 2.7.8","affected_versions_present":true,"cve_id":"CVE-2026-44726","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44726","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T13:48:50.170Z","patch_url":"","primary_source":"","published":"2026-06-23T17:24:02.702Z"},{"affected":"< 2.7.14","affected_versions_present":true,"cve_id":"CVE-2026-49401","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49401","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-31T13:15:42.807Z","patch_url":"https://github.com/denoland/deno/security/advisories/GHSA-8xpq-cjcf-3wh9","primary_source":"","published":"2026-06-23T17:22:32.266Z"},{"affected":"< 2.7.10","affected_versions_present":true,"cve_id":"CVE-2026-49402","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49402","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T03:55:49.852Z","patch_url":"https://github.com/denoland/deno/security/advisories/GHSA-7xh3-mhg9-jcw8","primary_source":"","published":"2026-06-23T17:20:50.122Z"},{"affected":"< 2.7.12","affected_versions_present":true,"cve_id":"CVE-2026-49406","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49406","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T17:50:19.392Z","patch_url":"https://github.com/denoland/deno/security/advisories/GHSA-968w-xfqw-vp9q","primary_source":"","published":"2026-06-23T17:19:15.767Z"},{"affected":"< 2.8.0","affected_versions_present":true,"cve_id":"CVE-2026-49411","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49411","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-26T18:56:10.417Z","patch_url":"https://github.com/denoland/deno/security/advisories/GHSA-v8fw-85r8-5m23","primary_source":"","published":"2026-06-23T17:18:07.354Z"},{"affected":"< 2.8.1","affected_versions_present":true,"cve_id":"CVE-2026-49983","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49983","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T17:54:51.686Z","patch_url":"","primary_source":"","published":"2026-06-23T17:16:17.026Z"},{"affected":"< 2.8.1","affected_versions_present":true,"cve_id":"CVE-2026-49860","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49860","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-23T17:37:07.624Z","patch_url":"","primary_source":"","published":"2026-06-23T17:15:05.749Z"},{"affected":"< 2.8.1","affected_versions_present":true,"cve_id":"CVE-2026-49859","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49859","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-24T14:23:09.068Z","patch_url":"","primary_source":"","published":"2026-06-23T17:14:16.888Z"},{"affected":"< 2.8.1","affected_versions_present":true,"cve_id":"CVE-2026-49440","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49440","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T13:48:28.573Z","patch_url":"","primary_source":"","published":"2026-06-23T17:13:25.052Z"},{"affected":">= 2.7.0, < 2.7.2","affected_versions_present":true,"cve_id":"CVE-2026-32260","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-32260","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-13T16:13:40.538Z","patch_url":"https://github.com/denoland/deno/security/advisories/GHSA-4c96-w8v2-p28j","primary_source":"","published":"2026-03-12T19:41:17.965Z"},{"affected":"< 2.6.8","affected_versions_present":true,"cve_id":"CVE-2026-27190","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27190","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-24T18:30:43.652Z","patch_url":"https://github.com/denoland/deno/commit/9132ad958c83a0d0b199de12b69b877f63edab4c","primary_source":"","published":"2026-02-20T20:52:11.468Z"},{"affected":"< 2.5.6","affected_versions_present":true,"cve_id":"CVE-2026-22864","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22864","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-16T17:16:02.143Z","patch_url":"","primary_source":"","published":"2026-01-15T22:58:52.463Z"},{"affected":"< 2.6.0","affected_versions_present":true,"cve_id":"CVE-2026-22863","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22863","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-16T17:16:41.355Z","patch_url":"","primary_source":"","published":"2026-01-15T22:53:15.357Z"},{"affected":">= 2.3.0, < 2.5.3; < 2.2.15","affected_versions_present":true,"cve_id":"CVE-2025-61787","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-61787","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-08T18:51:09.772Z","patch_url":"https://github.com/denoland/deno/pull/30818","primary_source":"","published":"2025-10-08T00:59:17.322Z"},{"affected":">= 2.3.0, < 2.5.3; < 2.2.15","affected_versions_present":true,"cve_id":"CVE-2025-61786","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-61786","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-08T18:54:33.415Z","patch_url":"https://github.com/denoland/deno/pull/30876","primary_source":"","published":"2025-10-08T00:49:42.824Z"},{"affected":">= 2.3.0, < 2.5.3; < 2.2.15","affected_versions_present":true,"cve_id":"CVE-2025-61785","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-61785","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-10-08T18:59:12.863Z","patch_url":"https://github.com/denoland/deno/pull/30872","primary_source":"","published":"2025-10-08T00:37:01.869Z"},{"affected":">= 2.2.0, < 2.2.5","affected_versions_present":true,"cve_id":"CVE-2025-48935","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-48935","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-04T20:41:22.848Z","patch_url":"https://github.com/denoland/deno/commit/31a97803995bd94629528ba841b2418d3ca01860","primary_source":"","published":"2025-06-04T19:31:26.840Z"},{"affected":"< 2.1.13; >= 2.2.0, < 2.2.13","affected_versions_present":true,"cve_id":"CVE-2025-48934","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-48934","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-04T19:32:14.582Z","patch_url":"https://github.com/denoland/deno/pull/29079","primary_source":"","published":"2025-06-04T19:21:17.701Z"},{"affected":">= 1.41.3, < 2.1.13; >= 2.2.0, < 2.2.13; >= 2.3.0, < 2.3.2","affected_versions_present":true,"cve_id":"CVE-2025-48888","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-48888","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-04T19:32:53.261Z","patch_url":"https://github.com/denoland/deno/pull/22894","primary_source":"","published":"2025-06-04T19:15:55.041Z"},{"affected":">= 1.46.0, < 2.1.7","affected_versions_present":true,"cve_id":"CVE-2025-24015","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-24015","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-06-04T19:15:04.623Z","patch_url":"https://github.com/denoland/deno/security/advisories/GHSA-2x3r-hwv5-p32x","primary_source":"","published":"2025-06-03T22:48:52.906Z"},{"affected":"< 2.1.2","affected_versions_present":true,"cve_id":"CVE-2025-21620","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-21620","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-01-07T16:49:19.307Z","patch_url":"","primary_source":"","published":"2025-01-06T22:26:40.723Z"},{"affected":"deno_doc: < 0.119.0; deno: < 1.42.0","affected_versions_present":true,"cve_id":"CVE-2024-32468","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32468","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-25T19:26:26.427Z","patch_url":"","primary_source":"","published":"2024-11-25T18:44:27.785Z"},{"affected":"= 1.44.0","affected_versions_present":true,"cve_id":"CVE-2024-37150","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-37150","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T03:50:54.672Z","patch_url":"https://github.com/denoland/deno/commit/566adb7c0a0c0845e90a6e867a2c0ef5d2ada575","primary_source":"","published":"2024-06-06T15:28:14.216Z"},{"affected":"< 1.43.0","affected_versions_present":true,"cve_id":"CVE-2024-34346","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-34346","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T02:51:11.237Z","patch_url":"","primary_source":"","published":"2024-05-07T21:02:16.809Z"},{"affected":"< 1.42.2","affected_versions_present":true,"cve_id":"CVE-2024-32477","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32477","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T02:13:39.109Z","patch_url":"","primary_source":"","published":"2024-04-18T19:58:25.993Z"},{"affected":">= 1.32.1, < 1.41.0","affected_versions_present":true,"cve_id":"CVE-2024-27936","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27936","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T00:41:55.809Z","patch_url":"https://github.com/denoland/deno/commit/78d430103a8f6931154ddbbe19d36f3b8630286d","primary_source":"","published":"2024-03-06T21:05:59.251Z"},{"affected":">= 1.35.1, < 1.36.3","affected_versions_present":true,"cve_id":"CVE-2024-27935","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27935","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T20:12:42.832Z","patch_url":"https://github.com/denoland/deno/commit/3e9fb8aafd9834ebacd27734cea4310caaf794c6","primary_source":"","published":"2024-03-06T21:02:14.359Z"},{"affected":">= 1.36.2, < 1.40.3","affected_versions_present":true,"cve_id":"CVE-2024-27934","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27934","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T19:24:42.692Z","patch_url":"","primary_source":"","published":"2024-03-06T20:56:39.368Z"},{"affected":"= 1.39.0","affected_versions_present":true,"cve_id":"CVE-2024-27933","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27933","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T19:55:09.948Z","patch_url":"https://github.com/denoland/deno/commit/55fac9f5ead6d30996400e8597c969b675c5a22b","primary_source":"","published":"2024-03-06T20:52:17.599Z"},{"affected":">= 1.8.0, < 1.40.4","affected_versions_present":true,"cve_id":"CVE-2024-27932","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27932","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T16:59:34.779Z","patch_url":"https://github.com/denoland/deno/commit/de23e3b60b066481cc390f459497d5bef42a899b","primary_source":"","published":"2024-03-06T20:45:16.373Z"},{"affected":"< 1.41.1","affected_versions_present":true,"cve_id":"CVE-2024-27931","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27931","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T00:41:55.851Z","patch_url":"","primary_source":"","published":"2024-03-05T16:43:11.934Z"},{"affected":"deno = 1.34.0; deno_runtime = 0.114.0","affected_versions_present":true,"cve_id":"CVE-2023-33966","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-33966","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-01-09T20:24:06.794Z","patch_url":"","primary_source":"","published":"2023-05-31T17:15:13.791Z"},{"affected":">= 1.8.0, < 1.31.2","affected_versions_present":true,"cve_id":"CVE-2023-28446","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-28446","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-19T20:25:29.969Z","patch_url":"https://github.com/denoland/deno/releases/tag/v1.31.2","primary_source":"","published":"2023-03-24T19:46:28.641Z"},{"affected":"= 1.32.0","affected_versions_present":true,"cve_id":"CVE-2023-28445","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-28445","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-20T19:17:12.688Z","patch_url":"https://github.com/denoland/deno/pull/18395","primary_source":"","published":"2023-03-23T23:23:27.931Z"},{"affected":">= 1.9, < 1.29.3","affected_versions_present":true,"cve_id":"CVE-2023-22499","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-22499","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-10T21:22:41.801Z","patch_url":"https://github.com/denoland/deno/pull/17392","primary_source":"","published":"2023-01-17T20:23:20.515Z"},{"affected":">= 1.18.0, < 1.20.3","affected_versions_present":true,"cve_id":"CVE-2022-24783","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24783","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T18:43:31.886Z","patch_url":"","primary_source":"","published":"2022-03-25T21:15:12.000Z"},{"affected":"< 1.10.2","affected_versions_present":true,"cve_id":"CVE-2021-32619","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-32619","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-03T23:25:30.920Z","patch_url":"","primary_source":"","published":"2021-05-28T21:00:12.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"denoland"}}