CVE-2026-49440

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.checkPrime(candidate[, options][, callback]) and crypto.checkPrimeSync(candidate[, options]) ran no Miller-Rabin rounds at all when the caller left options.checks at its default of 0. In that mode, the only test applied to the candidate was trial division by the primes up to 17,863. Any composite whose smallest prime factor exceeds that bound — for example the product of two primes just above it, such as 17,881 × 17,891 — was reported as true ("probably prime"). The same divergence affected the lower-level op_node_check_prime / op_node_check_prime_bytes paths that the polyfill calls into. This vulnerability is fixed in 2.8.1.

• CWE-325

• https://github.com/denoland/deno/pull/34391Issue Tracking
• https://github.com/denoland/deno/security/advisories/GHSA-9xg4-qhm4-g43wThird Party Advisory

Published

Jun 23, 2026

Last Modified

Jun 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4942IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker t…7.5
• CVE-2026-49432Improper Input Validation vulnerability in Apache ActiveMQ, …7.5
• CVE-2026-49433The DeepAI endpoint 'https://api.deepai.org/change_user_emai…5
• CVE-2026-49434Improper Input Validation vulnerability in Apache ActiveMQ B…7.5
• CVE-2026-49435Keysight IxChariot Endpoint and associated products contain …9.8
• CVE-2026-4944vllm-project/vllm version 0.14.1 contains a vulnerability wh…8.8
• CVE-2026-49443authentik is an open-source identity provider. Prior to vers…8.8
• CVE-2026-49444n8n is an open source workflow automation platform. Prior to…8.5
• CVE-2026-49445Cilium is a networking, observability, and security solution…8.8
• CVE-2026-49447Cosmos provides users the ability self-host a home server by…5.3
• CVE-2026-49448authentik is an open-source identity provider. Prior to vers…9.8
• CVE-2026-49451The OpenAPI.NET SDK contains a useful object model for OpenA…7.5