Skip to content
Threat Feed
Subscribe

Tag

Deno

4 briefs RSS
high advisory

Command Injection in Deno node:child_process Module

Deno versions 2.7.0 through 2.9.7 on Windows are vulnerable to command injection in the node:child_process module due to improper shell argument escaping.

Deno vulnerability command-injection windows
1t 1c
high advisory

Deno TLS Plaintext Injection Vulnerability

A vulnerability in Deno's Node.js tls compatibility layer (versions 2.0.0 to 2.7.7) allows a network attacker to intercept and tamper with plaintext application data transmitted over a supposedly TLS-protected connection when `autoSelectFamily` is enabled and the initial connection attempt fails, leading to potential information disclosure and data manipulation.

deno tls plaintext vulnerability
2r 1t
high advisory

Suspicious JavaScript Execution via Deno

Detects execution of JavaScript via Deno with suspicious command-line patterns (base64, eval, http, or import in a JavaScript context), which adversaries may abuse to run malicious JavaScript for execution or staging.

Elastic Defend +2 execution javascript deno windows
2r 1t
high advisory

Suspicious JavaScript Execution via Deno

This rule detects the execution of JavaScript via Deno with suspicious command-line patterns such as base64, eval, http, or javascript import, which attackers may abuse to run malicious JavaScript for execution or staging.

Deno javascript execution
2r 1t