CVE-2021-41641

8.4

HIGHCVSS v3

Published

June 12, 2022

CVSS v2

3.6 LOW

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

denoland/deno

GitHubA modern runtime for JavaScript and TypeScript.

>= 1.10.3, <= 1.14.0NVD

deno

NPMA modern runtime for JavaScript and TypeScript.

>= 1.10.3, <= 1.14.0NVD

deno

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python redistribution of Deno binaries

>= 1.10.3, <= 1.14.0NVD

deno

Crates.ioProvides the deno executable

>= 1.10.3, <= 1.14.0NVD

Security Advisories

CVE-2021-41641

Description

More on this CVE