grunt (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package grunt, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2020-7729 — CVSS 7.1 (high): The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its…
• CVE-2022-1537 — CVSS 7.0 (high): file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository…
• CVE-2022-0436 — CVSS 5.5 (medium): Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.