Deno's --deny-read check does not prevent permission bypass

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-61786 · Microsoft / collected KEV context

EUVD-2025-33180

GHSA-qq26-84mh-26j9

cve-program · CVE-2025-61786

• https://github.com/denoland/deno/security/advisories/GHSA-qq26-84mh-26j9
• https://github.com/denoland/deno/pull/30876
• https://github.com/denoland/deno/commit/1ab2268c0bcbf9b0468e0e36963f77f8c31c73ec
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

euvd · EUVD-2025-33180

• https://github.com/denoland/deno/security/advisories/GHSA-qq26-84mh-26j9
• https://github.com/denoland/deno/pull/30876
• https://github.com/denoland/deno/commit/1ab2268c0bcbf9b0468e0e36963f77f8c31c73ec
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

nvd · CVE-2025-61786

• https://github.com/denoland/deno/commit/1ab2268c0bcbf9b0468e0e36963f77f8c31c73ec
• https://github.com/denoland/deno/pull/30876
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3
• https://github.com/denoland/deno/security/advisories/GHSA-qq26-84mh-26j9

osv · GHSA-qq26-84mh-26j9

• https://github.com/denoland/deno/security/advisories/GHSA-qq26-84mh-26j9
• https://nvd.nist.gov/vuln/detail/CVE-2025-61786
• https://github.com/denoland/deno/pull/30876
• https://github.com/denoland/deno/commit/1ab2268c0bcbf9b0468e0e36963f77f8c31c73ec
• https://github.com/denoland/deno
• https://github.com/denoland/deno/releases/tag/v2.2.15
• https://github.com/denoland/deno/releases/tag/v2.5.3

No related operational record is retained in the current change model.