{"action":"Upgrade docusaurus-plugin-content-gists to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0"}],"component":"docusaurus-plugin-content-gists","cve_ids":["CVE-2025-53624"],"ecosystem":"npm","epss":0.02048,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-qf34-qpr4-5pph","id":"tcs_01M5KG5YR0J72PNQPQJZA06N2Y","modified_at":"2025-07-09T23:12:26.754530Z","published_at":"2025-07-09T22:40:06Z","references":["https://osv.dev/vulnerability/GHSA-qf34-qpr4-5pph","https://github.com/webbertakken/docusaurus-plugin-content-gists/security/advisories/GHSA-qf34-qpr4-5pph","https://nvd.nist.gov/vuln/detail/CVE-2025-53624","https://github.com/webbertakken/docusaurus-plugin-content-gists/commit/8d4230b82412edb215ddfa9e609d178510a5fe31","https://github.com/webbertakken/docusaurus-plugin-content-gists"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-qf34-qpr4-5pph","url":"https://osv.dev/vulnerability/GHSA-qf34-qpr4-5pph"}],"summary":"docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token"}