webbertakken/docusaurus-plugin-content-gists

webbertakken/docusaurus-plugin-content-gists

Releases5

Frequency9 months 1 week

Last Release 12 months ago

Stars12

Display your gists inside docusaurus.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-53624 ↗	Jul 9, 2025Wednesday, 9 July 2025, 21:15	10 CRITICAL	—
The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuration options. The token, intended for build-time API access only, is inadvertently included in client-side JavaScript bundles, making it accessible to anyone who can view the website's source code. This vulnerability is fixed in 4.0.0.