CVE-2021-41641

Deno <=1.14.0 file sandbox does not handle symbolic links correctly

published June 12, 2022

CVSS
—
EPSS
0%
Percentile
31.0
In the wild
Unconfirmed
What it is

Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.0th percentile
Published
2022-06-12T12:12Z
EPSS history
Timeline
  • 12 JUN 12:12Z
    Deno <=1.14.0 file sandbox does not handle symbolic links correctly
    cvelistv5