Skip to main content
← npm

grunt

3 known vulnerabilities (3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 high
Registry
npm

Advisories 3

  • file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in gruntjs/grunt

    Affected: fixed in 1.5.3.

  • Path Traversal in gruntjs/grunt

    Affected: fixed in 1.5.2.

  • Arbitrary Code Execution

    Affected: fixed in 1.3.0.