CVE-2020-7729
1 advisory.
npm/grunt CVE-2020-7729: high 7.1, EPSS 2.30%
Arbitrary Code Execution in grunt
Action: Upgrade grunt to 1.3.0 or later.
npm i grunt@1.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.0 | - |
Fixed versions
| 1.3.0 |
Sources
- osv: GHSA-m5pj-vjjf-4m3h
- https://nvd.nist.gov/vuln/detail/CVE-2020-7729
- https://github.com/gruntjs/grunt/commit/e350cea1724eb3476464561a380fb6a64e61e4e7
- https://github.com/gruntjs/grunt/blob/master/lib/grunt/file.js%23L249
- https://lists.debian.org/debian-lts-announce/2020/09/msg00008.html
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-607922
- https://snyk.io/vuln/SNYK-JS-GRUNT-597546
- https://usn.ubuntu.com/4595-1
CVE-2020-7729 · published · modified · JSON