[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	No	Proof of Concept
	708/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.3	Directory Traversal SNYK-JS-GRUNT-2635969	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: grunt

The new version differs by 63 commits.

• a7ab0a8 1.5.0
• b2b2c2b Updated changelog
• 3eda6ae Merge pull request #1740 from gruntjs/update-deps-22-10
• 47d32de Update testing matrix
• 2e9161c More updates
• 04b960e Remove console log
• aad3d45 Update dependencies, tests...
• fdc7056 Merge pull request #1736 from justlep/main
• e35fe54 support .cjs extension
• ee722d1 1.4.1
• e7625e5 Update Changelog
• 5d67e34 Merge pull request #1731 from gruntjs/update-options
• d13bf88 Fix ci install
• 08896ae Switch to Actions
• eee0673 Update grunt-known-options
• 1b6e288 Add note about a breaking change
• ffa6775 1.4.0
• 63b2e89 Merge pull request #1728 from gruntjs/update-deps-changelog
• 106ed17 Update changelog and util dep
• 49de70b Merge pull request #1727 from gruntjs/update-deps-apr
• 47cf8b6 Update CLI and nodeunit
• e86db1c Merge pull request #1722 from gruntjs/update-through
• 4952368 Update deps
• 6f49017 1.3.0

See the full diff

Package name: grunt-contrib-clean

The new version differs by 10 commits.

• 9bd20a6 2.0.1
• 518aa72 Update deps (#117)
• d226900 Update deps, clean up (#116)
• 395bb66 Bump async from 2.6.1 to 3.2.2 (#113)
• b94a81e Bump path-parse from 1.0.5 to 1.0.7 (#112)
• 897e872 Bump js-yaml from 3.5.5 to 3.14.1 (#111)
• 947a601 Bump hosted-git-info from 2.6.0 to 2.8.9 (#110)
• 569bf5f Bump lodash from 4.17.15 to 4.17.21 (#109)
• 2d125d1 Bump grunt from 1.0.3 to 1.3.0 (#108)
• c1882fa Bump lodash from 4.17.10 to 4.17.15 (#104)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Directory Traversal