Arbitrary code execution in Grunt

Snyk Research discovered an arbitrary code execution vulnerability (CVE-2020-7729) in the Grunt JavaScript package caused by use of js-yaml's unsafe load() function; researchers confirmed exploitability with a proof-of-concept, notified the maintainer, and the issue was fixed in Grunt v1.3.0 with Snyk adding the CVE to its database and notifying affected projects.