Deno · Deno · CVE-2026-22863
**Name of the Vulnerable Software and Affected Versions**
Deno versions prior to 2.6.0
**Description**
Deno is a JavaScript, TypeScript, and WebAssembly runtime. A flaw in the `node:crypto` polyfill allows cryptographic handles to persist beyond their intended lifespan. This results in the possibility of infinite encryption rounds, potentially enabling attackers to attempt brute-force attacks or learn server secrets. The issue stems from the `node:crypto` module not finalizing ciphers correctly.
**Recommendations**
Upgrade to Deno version 2.6.0 or newer.