grunt-gh-pages@0.7.1 vulnerabilities

Publish to GitHub Pages with Grunt.

Direct Vulnerabilities

Known vulnerabilities in the grunt-gh-pages package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Credentials saved as clear-text in log

grunt-gh-pages writes the repository url to log without redacting the github authentication token. The token can be compromised if the logs become publicly available.

How to fix Credentials saved as clear-text in log?

Upgrade to version 1.0.0 or greater and consider revoking previously used credentials with the module.

<=0.9.1