Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-41641 1 Deno 1 Deno 2024-11-21 8.4 High
Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.
CVE-2021-32619 1 Deno 1 Deno 2024-11-21 9.8 Critical
Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through `import()` or `new Worker` might have been able to bypass network and file system permission checks when statically importing other modules. The vulnerability has been patched in Deno release 1.10.2.