VYPR
← All advisories
High severity8.4NVD Advisory· Published Jun 12, 2022· Updated Jun 17, 2026

CVE-2021-41641

CVE-2021-41641

Description

Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
denocrates.io
< 1.16.01.16.0

Affected products

3
  • ghsa-coords
    pkg:cargo/deno
    Range: < 1.16.0
  • Denoland/Denocpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*range: >=1.10.3,<=1.14.0

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.