CVE-2026-44726

high
Published 2026-05-27 · Modified 2026-05-27
CVSS v3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v2
VIR risk
8.0

Description

Deno's TLS retry copies stale upgrade hook, risking plaintext traffic

Predictions

Exploit likelihood
30%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Package impact

EcosystemPackageVulnerableFixed
rust crates.iodeno>=2.0.0,<2.7.82.7.8
rust RUSTdeno>= 2.0.0, < 2.7.82.7.8

References

Verify integrity in audit chain (admin only). AS-IS.