https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 00:39:29 +0000 https://cve.radiocsirt.org/vuln/cve-2022-0436 <p><strong>Affected:</strong> gruntjs/grunt</p> <p>Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.</p> <p><strong>Affected:</strong> gruntjs/grunt</p> <p>Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.</p> https://cve.radiocsirt.org/vuln/cve-2022-0436 https://cve.radiocsirt.org/vuln/usn-5847-1 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: grunt, Ubuntu:Pro:20.04:LTS: grunt, Ubuntu:Pro:22.04:LTS: grunt</p> <p>It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-7729)</p> <p>It was discovered that Grunt was not properly handling symbolic links when performing file copy operations. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. (CVE-2022-0436)</p> <p>It was discovered that there was a race condition in the Grunt file copy function, which could lead to an arbitrary file write. An attacker could possibly use this issue to perform a local privilege escalation attack or to execute arbitrary code. (CVE-2022-1537)</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: grunt, Ubuntu:Pro:20.04:LTS: grunt, Ubuntu:Pro:22.04:LTS: grunt</p> <p>It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-7729)</p> <p>It was discovered that Grunt was not properly handling symbolic links when performing file copy operations. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. (CVE-2022-0436)</p> <p>It was discovered that there was a race condition in the Grunt file copy function, which could lead to an arbitrary file write. An attacker could possibly use this issue to perform a local privilege escalation attack or to execute arbitrary code. (CVE-2022-1537)</p> https://cve.radiocsirt.org/vuln/usn-5847-1