← All advisories

Critical severity9.8NVD Advisory· Published Oct 11, 2021· Updated Jun 17, 2026

CVE-2021-42139

CVE-2021-42139

Description

Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Denoland/standard modules2 versions
cpe:2.3:a:deno:deno_standard_modules:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:deno:deno_standard_modules:*:*:*:*:*:*:*:*range: <0.107.0
- (no CPE)
Deno Std/deno_stdllm-create
Range: <0.107.0
Denoland/Denollm-fuzzy
Range: <0.107.0

Patches

Vulnerability mechanics

References

3

github.com/denoland/deno_std/pull/1275nvdExploitThird Party Advisory
github.com/denoland/deno_std/releases/tag/0.107.0nvdRelease NotesThird Party Advisory
vuln.ryotak.me/advisories/58nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.