CVE-2020-7729

[rsoika]

grunt vulnerability found in …/imixs/package.json on May 7
Remediation

Upgrade grunt to version 1.3.0 or later. For example:

"dependencies": {
"grunt": ">=1.3.0"
}

or…

"devDependencies": {
"grunt": ">=1.3.0"
}

Always verify the validity and compatibility of suggestions with your codebase.
Details
CVE-2020-7729
high severity
Vulnerable versions: < 1.3.0
Patched version: 1.3.0

Effected File:

https://github.com/imixs/imixs-workflow/blob/master/imixs-workflow-faces/src/main/resources/META-INF/resources/imixs/jquery/themes/imixs/package.json

[rsoika]

Seems to be impossible to upgrade as the latest official version of jqueryUI 1.12.1still contains this outdated grunt version
See: https://jqueryui.com/