Vulnerability Database
Blog
FAQ
Docs
GHSA-j383-35pm-c5h4
Suggest an improvement
Source
https://github.com/advisories/GHSA-j383-35pm-c5h4
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-j383-35pm-c5h4/GHSA-j383-35pm-c5h4.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-j383-35pm-c5h4
Aliases
CVE-2022-0436
Published
2022-04-13T00:00:16Z
Modified
2023-11-08T04:07:34.227269Z
Severity
5.5 (Medium)
CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS Calculator
Summary
Path Traversal in Grunt
Details
Grunt prior to version 1.5.2 is vulnerable to path traversal.
References
https://nvd.nist.gov/vuln/detail/CVE-2022-0436
https://github.com/gruntjs/grunt/pull/1743
https://github.com/gruntjs/grunt/commit/aad3d4521c3098fb255fb2db8f2e1d691a033665
https://github.com/gruntjs/grunt/commit/b0ec6e12426fc8d5720dee1702f6a67455c5986c
https://github.com/gruntjs/grunt
https://huntr.dev/bounties/f55315e9-9f6d-4dbb-8c40-bae50c1ae92b
https://lists.debian.org/debian-lts-announce/2023/04/msg00008.html
Affected packages
npm
/
grunt
Package
Name
grunt
View open source insights on deps.dev
Purl
pkg:npm/grunt
Affected ranges
Type
SEMVER
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.5.2
GHSA-j383-35pm-c5h4 - OSV