CVE-2024-32477

CVE-2024-32477 affects Deno, a JavaScript, TypeScript, and WebAssembly runtime, by allowing an attacker to bypass its permission policy. This is achieved through a race condition involving ANSI escape sequences and standard input manipulation, forcing the permission prompt to allow unsafe actions regardless of user input. The vulnerability has a CVSS score of 7.4 (High), indicating a network-based attack with high impact on confidentiality and integrity, but requiring high attack complexity. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.