USN-5847-1 grunt vulnerabilities

It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to execute arbitrary code. CVE-2020-7729 It was discovered that Grunt was not properly handling symbolic links when performing file copy operations. An attacker could...

grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: OSV:GHSA-RRJ3-QMH8-72PF...