docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

Description

No description available.

Recommendation

Update the docusaurus-plugin-content-gists package to the latest compatible version. Followings are version details:

Affected version(s): < 4.0.0
Patched version(s): 4.0.0

References

Could your website be exposed too?

SmartScanner can check your website for docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token and gives you actionable findings to investigate.

Start a free scan

Related Issues

content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE - CVE-2025-55164
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Back - CVE-2025-25288
Suspended Directus user can continue to use session token to access API - CVE-2025-30351
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler - CVE-2025-27098

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

See something that needs correcting? Let us knowUpdated July 09, 2025