CVE-2023-28445

Name of the Vulnerable Software and Affected Versions Deno version 1.32.0

Description The issue is related to resizable ArrayBuffers passed to asynchronous functions that are shrunk during the asynchronous operation, which could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild. Deno Deploy users are not affected.

Recommendations For Deno version 1.32.0, upgrade to Deno 1.32.1 to resolve the issue. As a temporary workaround for Deno version 1.32.0, run with --v8-flags=--no-harmony-rab-gsab to disable resizable ArrayBuffers.