一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月1日

CVE-2026-103473 [HIGH] – Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in

未分类
📑 文章目录

Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:child_process where shell arguments are escaped for the wrong shell type. Attackers can inject OS commands by passing untrusted arguments with the shell option, allowing arbitrary command execution with Deno process privileges.