CVE-2025-53624

npm/docusaurus-plugin-content-gists CVE-2025-53624: critical 10

docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

Action: Upgrade docusaurus-plugin-content-gists to 4.0.0 or later.

npm i docusaurus-plugin-content-gists@4.0.0

Affected

Fixed versions

Sources

• osv: GHSA-qf34-qpr4-5pph
• https://github.com/webbertakken/docusaurus-plugin-content-gists/security/advisories/GHSA-qf34-qpr4-5pph
• https://nvd.nist.gov/vuln/detail/CVE-2025-53624
• https://github.com/webbertakken/docusaurus-plugin-content-gists/commit/8d4230b82412edb215ddfa9e609d178510a5fe31
• https://github.com/webbertakken/docusaurus-plugin-content-gists

CVE-2025-53624 · published 2025-07-09T22:40:06Z · modified 2025-07-09T23:12:26.754530Z · JSON