{"action":"Upgrade grunt-gh-pages to 0.10.0 or later.","affected":[{"fixed":"0.10.0","introduced":"0"}],"component":"grunt-gh-pages","cve_ids":["CVE-2016-10526"],"ecosystem":"npm","epss":0.01612,"exploited":false,"fixed_versions":["0.10.0"],"ghsa_id":"GHSA-rrj3-qmh8-72pf","id":"tcs_01M5KG9SRR5KYF5BVXJ5DACD4Y","modified_at":"2023-11-08T03:58:10.599145Z","published_at":"2019-02-18T23:39:11Z","references":["https://osv.dev/vulnerability/GHSA-rrj3-qmh8-72pf","https://nvd.nist.gov/vuln/detail/CVE-2016-10526","https://github.com/tschaub/grunt-gh-pages/pull/41","https://github.com/tschaub/grunt-gh-pages/pull/41/commits/590f69767203d8c379fe18cded93bd5ad6cb53cb","https://github.com/tschaub/grunt-gh-pages/commit/2d277e3e969ccd4c2d493f3795400fa77e6b6342","https://github.com/tschaub/grunt-gh-pages","https://www.npmjs.com/advisories/85"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rrj3-qmh8-72pf","url":"https://osv.dev/vulnerability/GHSA-rrj3-qmh8-72pf"}],"summary":"grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file"}