Junglewise Threat Intelligence

CVE-2023-33966: Missing "--allow-net" permission check for built-in Node modules

CVE-2023-33966 · Severity: low · CVSS 3.1 · Published 2023-05-31

Technologies: deno_runtime (crates.io), deno (crates.io). Vendors: crates.io.

Executive brief

Missing "--allow-net" permission check for built-in Node modules

Affected products

  • crates.io deno_runtime
  • crates.io deno

Related threats