CVE-2021-41641

2022-06-1213:15:07

Google

osv.dev

8.6 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

JSON

Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

CPENameOperatorVersion
denoeq1.12.1
denoeq1.13.0
denoeq1.13.2
denoeq1.11.1
denoeq1.12.2
denoeq1.14.0
denoeq1.12.0
denoeq1.13.1
denoeq1.10.3
denoeq1.11.0