Deno's --deny-write check does not prevent permission bypass

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-61785 · Microsoft / collected KEV context

EUVD-2025-31878

GHSA-vg2r-rmgp-cgqj

cve-program · CVE-2025-61785

• https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj
• https://github.com/denoland/deno/pull/30872
• https://github.com/denoland/deno/commit/992e998dfe436cdc9325232759af8be92f11739b
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

euvd · EUVD-2025-31878

• https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj
• https://github.com/denoland/deno/pull/30872
• https://github.com/denoland/deno/commit/992e998dfe436cdc9325232759af8be92f11739b
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

nvd · CVE-2025-61785

• https://github.com/denoland/deno/commit/992e998dfe436cdc9325232759af8be92f11739b
• https://github.com/denoland/deno/pull/30872
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3
• https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj

osv · GHSA-vg2r-rmgp-cgqj

• https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj
• https://nvd.nist.gov/vuln/detail/CVE-2025-61785
• https://github.com/denoland/deno/pull/30872
• https://github.com/denoland/deno/commit/992e998dfe436cdc9325232759af8be92f11739b
• https://github.com/denoland/deno
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

No related operational record is retained in the current change model.