Skip to content
OpenAdvisories
High DLA-2368-1 1 CVE

grunt - security update

Published Sep 9, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 grunt 1.0.1-5+deb9u1

Vulnerabilities 1

  • High 7.1
    CVE-2020-7729

    Arbitrary Code Execution

    The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.

    js-jquery grunt grunt grunt Debian Ubuntu Azure Linux npm