Gruntjs Grunt — known CVE vulnerabilities

Every CVE whose affected-product data names Gruntjs Grunt, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-7729 — CVSS 7.1 (high): The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its…
• CVE-2022-1537 — CVSS 7.0 (high): file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository…
• CVE-2022-0436 — CVSS 5.5 (medium): Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.