Servers and applications
CVE-2024-27931
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Insufficient validation of parameters in `Deno.makeTemp*` APIs would allow for creation of files outside of the allowed directories. This may allow the user to overwrite important files on the system that may affect other systems. A user may provide a prefix or suffix to a `Deno.makeTemp*` API containing path…
- Severity
- Medium 6.5
- Published
- 5 Mar 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 1.41.1
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
DenoServers and applications · cpe:a:deno:deno |
|