From 0357108544600de59bd64da115ae8955277716e2 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 4 Jun 2025 21:15:33 +0000
Subject: [PATCH] Publish Advisories

GHSA-v352-rg37-5q5m
GHSA-xqxc-x6p3-w683
---
 .../GHSA-v352-rg37-5q5m.json                  |   6 +-
 .../GHSA-xqxc-x6p3-w683.json                  | 134 ++++++++++++++++++
 2 files changed, 139 insertions(+), 1 deletion(-)
 create mode 100644 advisories/github-reviewed/2025/06/GHSA-xqxc-x6p3-w683/GHSA-xqxc-x6p3-w683.json

diff --git a/advisories/github-reviewed/2024/08/GHSA-v352-rg37-5q5m/GHSA-v352-rg37-5q5m.json b/advisories/github-reviewed/2024/08/GHSA-v352-rg37-5q5m/GHSA-v352-rg37-5q5m.json
index b709a741aba..8ef8a32c346 100644
--- a/advisories/github-reviewed/2024/08/GHSA-v352-rg37-5q5m/GHSA-v352-rg37-5q5m.json
+++ b/advisories/github-reviewed/2024/08/GHSA-v352-rg37-5q5m/GHSA-v352-rg37-5q5m.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v352-rg37-5q5m",
-  "modified": "2024-11-18T16:26:59Z",
+  "modified": "2025-06-04T21:14:18Z",
   "published": "2024-08-02T12:31:43Z",
   "aliases": [
     "CVE-2024-27181"
@@ -51,6 +51,10 @@
     {
       "type": "WEB",
       "url": "https://lists.apache.org/thread/hosd73l7hxb3rpt5rb0yg0ld11zph4c6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.openwall.com/lists/oss-security/2024/08/02/3"
     }
   ],
   "database_specific": {
diff --git a/advisories/github-reviewed/2025/06/GHSA-xqxc-x6p3-w683/GHSA-xqxc-x6p3-w683.json b/advisories/github-reviewed/2025/06/GHSA-xqxc-x6p3-w683/GHSA-xqxc-x6p3-w683.json
new file mode 100644
index 00000000000..08a115b2098
--- /dev/null
+++ b/advisories/github-reviewed/2025/06/GHSA-xqxc-x6p3-w683/GHSA-xqxc-x6p3-w683.json
@@ -0,0 +1,134 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xqxc-x6p3-w683",
+  "modified": "2025-06-04T21:13:44Z",
+  "published": "2025-06-04T21:13:44Z",
+  "aliases": [
+    "CVE-2025-48888"
+  ],
+  "summary": "Deno run with --allow-read and --deny-read flags results in allowed",
+  "details": "### Summary\n\n`deno run --allow-read --deny-read main.ts` results in allowed, even though 'deny' should be stronger. Same with all global unary permissions given as `--allow-* --deny-*`.\n\n### Details\n\nCaused by the fast exit logic in #22894.\n\n### PoC\n\nRun the above command expecting no permissions to be passed.\n\n### Impact\n\nThis only affects a nonsensical combination of flags, so there shouldn't be a real impact on the userbase.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "crates.io",
+        "name": "deno"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.41.3"
+            },
+            {
+              "fixed": "2.1.13"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "crates.io",
+        "name": "deno"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.2.0"
+            },
+            {
+              "fixed": "2.2.13"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "crates.io",
+        "name": "deno"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.3.0"
+            },
+            {
+              "fixed": "2.3.2"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "crates.io",
+        "name": "deno_runtime"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0.150.0"
+            },
+            {
+              "fixed": "0.212.0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/denoland/deno/security/advisories/GHSA-xqxc-x6p3-w683"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/denoland/deno/pull/22894"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/denoland/deno/pull/29213"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/denoland/deno/commit/2f0fae9d9071dcaf0a689bc7097584b1b9ebc8db"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/denoland/deno/commit/9d665572d3cd39f997e29e6daac7c1102fc5c04f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/denoland/deno/commit/ef315b56c26c9ef5f25284a5100d2ed525a148cf"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/denoland/deno"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-06-04T21:13:44Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file