Lucene search

K
cvelistSnykCVELIST:CVE-2020-7729
HistorySep 03, 2020 - 12:00 a.m.

CVE-2020-7729 Arbitrary Code Execution

2020-09-0300:00:00
snyk
raw.githubusercontent.com
1

7.1 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.1%

The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.

7.1 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.1%