Environment permission bypass via unchecked dotenv writes

Incorrect authorization in Deno 2.3.0 through 2.8.0 allows local users to modify the runtime environment via a readable .env file. The Node-compatible process.loadEnvFile() API checks only read permission on the dotenv file and writes every parsed key into process.env without enforcing denied or allowlisted env permissions. Exploitation requires a program or dependency to call the API with read access to a less-trusted file while relying on the env permission boundary, enabling unauthorized environment-variable changes.