CVE-2021-32619

    Dashboard / Vulnerabilities / CVE-2021-32619

    CVE-2021-32619

    Published: 28 May 2021Last Modified: 7 Aug 2026

    Summary:

    Details: Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through `import()` or `new Worker` might have been able to bypass network and file system permission checks when statically importing other modules. The vulnerability has been patched in Deno release 1.10.2.

    References: https://github.com/denoland/deno/security/advisories/GHSA-xpwj-7v8q-mcgj

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- dd01f206da0b7e1b305e70cdd3c98bf60fbefc5d
    Fixed -232ec7798c5ee38e645c2aea31aea3e9a81e17f3

    Affected versions

    v1.10.1
    v1.10.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-32619 | CVE-DB