-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
RustRust| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| deno | rust | >= 1.9.0, < 1.29.3 | 1.29.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper synchronization of stdio streams during permission prompts. The pull request fix (denoland/deno#17392) specifically adds locking mechanisms for stdout/stderr in the permission prompter implementation. The TtyPrompter's prompt() function was vulnerable because it didn't maintain exclusive access to terminal output streams while displaying interactive prompts, enabling concurrent modification by other threads. The confidence is high as the fix directly correlates to adding synchronization in this specific component mentioned in the advisory and commit diff.
Ongoing coverage of React2Shell