TI-2023-12990 Aliases CVE-2023-28446 GHSA-vq67-rp93-65qf

Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization

HIGH 73CWE-150Published 2023-03-24 · Updated 2025-02-19

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

Deno is a simple, modern and secure runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Arbitrary program names without any ANSI filtering allows any malicious program to clear the first 2 lines of a `op_spawn_child` or `op_kill` prompt and replace it with any desired text. This works with any command on the respective platform, giving the program the full ability to choose what program they wanted to run. This problem can not be exploited on systems that do not attach an interactive prompt (for example headless servers). This issue has been patched in version 1.31.2.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.01132 66th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed deno (denoland): 1.31.2deno_runtime (crates.io): 1.31.2+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
denoland	deno	1.8.0 to before 1.31.2	1.31.2	Patch available	CNA
—	deno_runtime (crates.io)	1.8.0 to before 1.31.2	1.31.2	Patch available	GHSA-vq67-rp93-65qf
—	deno (crates.io)	1.8.0 to before 1.31.2	1.31.2	Patch available	GHSA-vq67-rp93-65qf

deno Vendordenoland Affected 1.8.0 to before 1.31.2 Fixed in 1.31.2 Patch available CNA
deno_runtime (crates.io) Vendor— Affected 1.8.0 to before 1.31.2 Fixed in 1.31.2 Patch available GHSA-vq67-rp93-65qf
deno (crates.io) Vendor— Affected 1.8.0 to before 1.31.2 Fixed in 1.31.2 Patch available GHSA-vq67-rp93-65qf

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:deno:deno::::::::	before 1.31.2	Vulnerable	denoland

cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:* Versions before 1.31.2 Vulnerable ·denoland

Remediation

Fix · CNA deno (denoland) Fixed in 1.31.2
Fix · GHSA-vq67-rp93-65qf deno_runtime (crates.io) Fixed in 1.31.2 Advisory →
Fix · GHSA-vq67-rp93-65qf deno (crates.io) Fixed in 1.31.2 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2023-28446
2026-10-03 Alias added: GHSA-vq67-rp93-65qf

References

Exploit 1

https://github.com/denoland/deno/security/advisories/GHSA-vq67-rp93-65qf

Patch 1

https://github.com/denoland/deno/releases/tag/v1.31.2

Advisory 2

Other 1

https://github.com/denoland/deno

TI-2026-21627 Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process CVSS 3.1CRITICAL 9.8
TI-2025-17782 Deno's AES GCM authentication tags are not verified CVSS 4.0HIGH 7.7
TI-2024-18537 *const c_void / ExternalPointer unsoundness leading to use-after-free CVSS 3.1HIGH 8.8
TI-2024-18536 Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass CVSS 3.1HIGH 8.8
TI-2023-11328 Regular expression denial of service in deno CVSS 3.1HIGH 7.5
TI-2024-18539 Deno interactive permission prompt spoofing via improper ANSI stripping CVSS 3.1HIGH 8.8

See all 37 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences