Q: Is CVE-2021-41641 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

Q: What products does CVE-2021-41641 affect?

Tracked products affected include Deno. Check the version you run to see whether it is affected.

Q: How do I fix CVE-2021-41641?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

Question 1

What is CVE-2021-41641?

Accepted Answer

CVE-2021-41641 is a high-severity software vulnerability (CWE-59) with a CVSS score of 8.4. Deno <=1.14.0 file sandbox does not handle symbolic links correctly. When running Deno with specific write access, the Deno.symlink method can be used to gain access to any directory.

Question 2

Is CVE-2021-41641 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

Question 3

What products does CVE-2021-41641 affect?

Accepted Answer

Tracked products affected include Deno. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2021-41641?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2021-41641

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information