crates.io/deno_runtime

Deno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables

Modified: 9/10/2026

Deno improperly handles resizable ArrayBuffer

Modified: 11/8/2023

Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping

Modified: 9/10/2026

Missing "--allow-net" permission check for built-in Node modules

Modified: 9/10/2026

Interactive `run` permission prompt spoofing via improper ANSI neutralization

Modified: 9/10/2026

Deno run with --allow-read and --deny-read flags results in allowed

Modified: 9/10/2026