Vendor/product archive

gruntjs / grunt CVEs

Beta · best-effort

3 CVEs tagged to gruntjs / grunt — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to gruntjs vendor archive

CVE-2022-1537

Published May 10, 2022

file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is…

CVSS 7.0 · High

Vendor/product tagsBeta · best-effort

CVE-2022-0436

Published Apr 12, 2022

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-7729

Published Sep 3, 2020

The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the packa…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1