CVE-2021-41641: Deno

High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

Affected products

• Deno Deno: from 1.10.3, up to and including 1.14.0

Published 2022-06-12. Last modified 2026-06-17.