TI-2016-08568 CVE-2016-10526 · GHSA-rrj3-qmh8-72pf
Credentials management flaw in HackerOne grunt-gh-pages node module
Priority MEDIUM 40
A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth part of the url.