CVE-2016-10526
1 advisory.
npm/grunt-gh-pages CVE-2016-10526: medium
grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file
Action: Upgrade grunt-gh-pages to 0.10.0 or later.
npm i grunt-gh-pages@0.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0 | - |
Fixed versions
| 0.10.0 |
Sources
- osv: GHSA-rrj3-qmh8-72pf
- https://nvd.nist.gov/vuln/detail/CVE-2016-10526
- https://github.com/tschaub/grunt-gh-pages/pull/41
- https://github.com/tschaub/grunt-gh-pages/pull/41/commits/590f69767203d8c379fe18cded93bd5ad6cb53cb
- https://github.com/tschaub/grunt-gh-pages/commit/2d277e3e969ccd4c2d493f3795400fa77e6b6342
- https://github.com/tschaub/grunt-gh-pages
- https://www.npmjs.com/advisories/85
CVE-2016-10526 · published · modified · JSON