CVE-2021-32619

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through import or new Worker might have been able to bypass network and file system permission checks when statically importing other modules...

CVE-2021-32619

Summary: CVE-2021-32619 affects Deno runtimes 1.5.0–1.10.1. A vulnerability in modules dynamically imported via import() or new Worker could bypass network and file-system permission checks when statically importing other modules. Impact (as described): attackers controlling a module in a program...

CVE-2021-32619 Static imports inside dynamically imported modules do not adhere to permission checks

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through import or new Worker might have been able to bypass network and file system permission checks when statically importing other modules...