EUVD-2021-16118

Malware in sbrugna...

Malicious code in gistpad (npm)

The package gistpad was found to contain malicious code...

MAL-2025-21451 Malicious code in gistpad (npm)

The package gistpad was found to contain malicious code...

CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

Design/Logic Flaw

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

CVE-2021-29642

CVE-2021-29642 affects GistPad prior to 0.2.7. A crafted workspace folder can alter the URL used for the Gist API, leading to leakage of GitHub access tokens. Product: GistPad (VS Code extension). Root cause: workspace folder URL manipulation enables token exposure. Impact: leakage of GitHub acce...

CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

CVE-2021-29642: Incorrect Authorization

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens...

PT-2021-18379

Name of the Vulnerable Software and Affected Versions GistPad versions prior to 0.2.7 Description The issue allows a crafted workspace folder to change the URL for the Gist API, leading to leakage of GitHub access tokens. Recommendations For versions prior to 0.2.7, update to version 0.2.7 or lat...

Jonathan Carter gistpad 安全漏洞

Jonathan Carter gistpad is an application open-sourced by Jonathan Carter. A Visual Studio Code extension that makes it easy to edit GitHub Gist and repositories from your favorite editor. A security vulnerability exists in GistPad before 0.2.7 that allows a crafted workspace folder to change the...