最新のセキュリティ情報
10月22日(木)今日
Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
影響: npm:vite >= 8.3.0, <= 8.3.2 → 8.3.3, npm:vite >= 8.2.0, <= 8.2.3 → 8.2.4, npm:vite-plus >= 0.2.8, <= 1.0.0 → 1.1.0 The first 4 bytes of files outside of server.fs setting can be returned to the browser by a request containing ?vite-wasm-instance. Impact Only apps that match one of the following conditions are affected: - explicitly expose the Vite dev server to the network using --host or the [server.host](https://vite.dev/config/server-options#server-host) option - there's a file that has a sensitive information in the first 4 bytes - uses Node.js or Deno to run Vite (if Bun is used, it is not affe…
2月3日(火)
Introducing Deno Sandbox
Instant Linux microVMs with defense-in-depth security for running untrusted code.
12月12日(金)
React / Next.js Denial-of-Service Vulnerability: Deno Deploy users protected
A high severity Denial-of-Service (DoS) vulnerability has been found in React Server Components and Next.js. Deno has implemented mitigations in Deno Deploy. Immediate upgrades are required for other users.
12月4日(木)
React Server Functions / Next.js Vulnerability: Deno Deploy users protected
A critical Remote Code Execution (RCE) vulnerability has been found in React Server Functions and Next.js. Deno has implemented mitigations in Deno Deploy. Immediate upgrades are required for other users.
9月30日(火)
How Deno protects against npm exploits
Recent supply chain attacks on npm is a reminder that Node and npm grants unfettered access to your systems. Here's how Deno, with an opt-in security model, protects against these vulnerabilities.
10月9日(水)
Announcing Deno 2
Our next major version of Deno combines the simplicity, security, and performance of Deno 1 with full Node and npm backwards compatibility, and much more.
9月10日(火)
Secure, efficient private npm registries with Cloudsmith and Deno
Deno can use private npm registries with Cloudsmith, which offers additional security features, analytics into module usage, and more. Here’s how to do it.
11月28日(火)
How security and tenant isolation allows Deno Subhosting to run untrusted code securely
Deno Deploy and Deno Subhosting was designed with security and tenant isolation in mind. Here's how it works.
8月4日(金)
Deno 1.36: More flexible security and expanded testing APIs
Deno 1.36 introduces new runtime security options plus expanded testing and benchmarking APIs.
6月23日(金)
Announcing SOC 2 Compliance
What SOC 2 compliance for security, availability, and confidentiality means for Deno.