CVE-2021-32619: Deno

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through `import()` or `new Worker` might have been able to bypass network and file system permission checks when statically importing other modules. The vulnerability has been patched in Deno release 1.10.2.

Affected products

• Deno Deno: from 1.5.0, before 1.10.2 (fixed in 1.10.2)

Published 2021-05-28. Last modified 2026-06-17.