Skip to content
OpenAdvisories

Product · HackerOne

grunt-gh-pages node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2016-10526

    grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file

    A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth part of the url. In module versions < 0.9.1 the auth portion of the url is outputted as part of the grunt tasks logging …

    HackerOne grunt-gh-pages node module grunt-gh-pages npm