Gruntjs Grunt
3 CVEs affecting Gruntjs Grunt. Latest disclosed: 2022-05-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7729 | High | 7.1 | 2020-09-03 | The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement saf… |
CVE-2022-1537 | High | 7.0 | 2022-05-10 | file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. Th… |
CVE-2022-0436 | Medium | 5.5 | 2022-04-12 | Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2. |