Most recent entries from all

EUVD-2026-180561

fkie_cve-2020-7729

The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.

GHSA-m5pj-vjjf-4m3h — Arbitrary Code Execution in grunt

Affected: npm: grunt

gsd-2020-7729

OESA-2022-1544 — nodejs-grunt security update

Affected: openEuler:20.03-LTS-SP1: nodejs-grunt, openEuler:20.03-LTS-SP2: nodejs-grunt, openEuler:20.03-LTS-SP3: nodejs-grunt

Grunt is the JavaScript task runner. Why use a task runner? In one word: automation. The less work you have to do when performing repetitive tasks like minification, compilation, unit testing, linting, etc, the easier your job becomes. After you've configured it, a task runner can do most of that mundane work for you with basically zero effort. Security Fix(es): The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.(CVE-2020-7729)

UBUNTU-CVE-2020-7729

Affected: Ubuntu:18.04:LTS: grunt, Ubuntu:Pro:20.04:LTS: grunt

WID-SEC-W-2026-2460 — Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.