Language and runtime
Deno: supported versions and open vulnerabilities today
Deno 2.9 is supported; 2.8 reached end of life on Jun 25, 2026; the latest release is 2.9.7. 8 high or critical advisories for Deno were published in the last 12 months; none of its advisories is on CISA’s list of exploited vulnerabilities.
Last checked against endoflife.date, OSV.dev, CISA KEV, FIRST EPSS and deps.dev.
- Latest release
- 2.9.7
- GitHub stars
- 108.8k
- Licence
- MIT
- OpenSSF Scorecard
- 5.2 / 10
Supported versions
Security advisories
14 advisories published in the last 12 months, 8 of them high or critical. 37 in total since records began. Checked packages: deno.
Deno: Command Injection via spawnSync & spawn on Windows
Fixed in 2.7.10.
EPSS: top 63%Deno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)
Fixed in 2.7.14.
EPSS: top 92%Deno: Miller-Rabin Primality Test Allows Zero Rounds
Fixed in 2.8.1.
EPSS: top 87%Deno's TLS retry copies stale upgrade hook, risking plaintext traffic
Fixed in 2.7.8.
EPSS: top 87%Deno vulnerable to command Injection via incomplete shell metacharacter blocklist in node:child_process
Fixed in 2.7.2.
EPSS: top 20%Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process
Fixed in 2.6.8.
EPSS: top 12%Deno node:crypto doesn't finalize cipher
Fixed in 2.6.0.
EPSS: top 91%Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass
Fixed in 2.5.6.
EPSS: top 49%
Maintenance and supply chain
OpenSSF Scorecard 5.2 / 10 (scored )
The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 2 issue updates found in the last 90 days.
Weakest checks
- Over-privileged CI tokens (Token-Permissions 0/10)
- Binaries checked into the repo (Binary-Artifacts 0/10)
- Unsigned releases (Signed-Releases 0/10)
Docs and release notes
Check Deno in your own stack
This page checks Deno in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.