grunt-http (>=2.0.0 <=2.2.0) potentially affected by CVE-2016-2515 via hawk (=4.0.1)

hawk NPM version =4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on hawk and may be impacted: - grunt-http =2.0.0, =2.2.0 Source cves: CVE-2016-2515 Source advisory: OSV:GHSA-JCPV-G9RR-QXRC...