Deno is Vulnerable to Command Injection on Windows During Batch File Execution

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-61787 · Microsoft / collected KEV context

EUVD-2025-33179

GHSA-m2gf-x3f6-8hq3

cve-program · CVE-2025-61787

• https://github.com/denoland/deno/security/advisories/GHSA-m2gf-x3f6-8hq3
• https://github.com/denoland/deno/pull/30818
• https://github.com/denoland/deno/commit/8a0990ccd37bafd8768176ca64b906ba2da2d822
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

euvd · EUVD-2025-33179

• https://github.com/denoland/deno/security/advisories/GHSA-m2gf-x3f6-8hq3
• https://github.com/denoland/deno/pull/30818
• https://github.com/denoland/deno/commit/8a0990ccd37bafd8768176ca64b906ba2da2d822
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

nvd · CVE-2025-61787

• https://github.com/denoland/deno/commit/8a0990ccd37bafd8768176ca64b906ba2da2d822
• https://github.com/denoland/deno/pull/30818
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3
• https://github.com/denoland/deno/security/advisories/GHSA-m2gf-x3f6-8hq3

osv · GHSA-m2gf-x3f6-8hq3

• https://github.com/denoland/deno/security/advisories/GHSA-m2gf-x3f6-8hq3
• https://nvd.nist.gov/vuln/detail/CVE-2025-61787
• https://github.com/denoland/deno/pull/30818
• https://github.com/denoland/deno/commit/8a0990ccd37bafd8768176ca64b906ba2da2d822
• https://github.com/denoland/deno
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.2

No related operational record is retained in the current change model.