CVE-2021-42139: deno deno standard modules – CVSS 9.8 · Watchpost

← All vulnerabilities

CVE-2021-42139

严重 9.8CVE-2021-42139 · Published 11/10/2021 · updated 17/06/2026

要点

CVE-2021-42139 是影响 deno standard modules (deno) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：2.1%，高于 81.4% 的漏洞。
修复：升级到 0.107.0 或更高版本。

Package	Affected versions	Patched versions
deno standard modules deno	`< 0.107.0`	`0.107.0`

Description

Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations.

References

denoland/deno_std#1275 · Exploit
denoland/deno_std release 0.107.0 · Release Notes
vuln.ryotak.me/advisories/58 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free