| Package | Affected versions | Patched versions |
|---|---|---|
| grunt | < 1.3.0 | 1.3.0 |
| grunt | < 1.3.0 | 1.3.0 |
The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free