{"action":"Upgrade grunt to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0"}],"component":"grunt","cve_ids":["CVE-2022-0436"],"ecosystem":"npm","epss":0.00589,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-j383-35pm-c5h4","id":"tcs_01M5KFWMX1DQ4HGX6N5Y53BKBJ","modified_at":"2026-09-10T03:49:18.059750979Z","published_at":"2022-04-13T00:00:16Z","references":["https://osv.dev/vulnerability/GHSA-j383-35pm-c5h4","https://nvd.nist.gov/vuln/detail/CVE-2022-0436","https://github.com/gruntjs/grunt/pull/1743","https://github.com/gruntjs/grunt/commit/aad3d4521c3098fb255fb2db8f2e1d691a033665","https://github.com/gruntjs/grunt/commit/b0ec6e12426fc8d5720dee1702f6a67455c5986c","https://github.com/gruntjs/grunt","https://huntr.dev/bounties/f55315e9-9f6d-4dbb-8c40-bae50c1ae92b","https://lists.debian.org/debian-lts-announce/2023/04/msg00008.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-j383-35pm-c5h4","url":"https://osv.dev/vulnerability/GHSA-j383-35pm-c5h4"}],"summary":"Path Traversal in Grunt"}