シュガーレス@Sugarless1101
General
CVE発行された！🍼ヾ(*´∀｀*)ﾉ🍼ｷｬｯｷｬ CVE-2026-49411
Post summary
The tweet simply announces the issuance of CVE-2026-49411 with no additional information.
210110640
135 followersView on X
CVE-2026-49411General(deno / deno)
LOWCVSS 6.5 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.0, the Node.js compatibility TCP path checked the permission against the original hostname string before resolution and then did not re-check after resolution. A caller could therefore pass a numeric alias of an IP address (for example the decimal integer 2130706433 or the hex form 0x7f000001, both of which resolve to 127.0.0.1) and reach the denied destination through node:net.connect or node:http.request's { host, port } options form. This vulnerability is fixed in 2.8.0.
0.0/ 10 priority
Sources & remediation
Exploit / PoC references
Weakness type (CWE)
CWE-284
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- deno
Threat summary
- 1 mentions across 1 observed day
What's happening
- General: 1 classified signal
- 1 total mentions across 1 day
Affected systems
Vendors
Products
deno
Deep dive
Activity timeline1 mentions / 1d
Signal classification1 categories
General1100.0%
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | deno | deno | - | - | - |