CVE-2021-29642

MEDIUM 5.3CVE-2021-29642 · Published 30/03/2021 · updated 17/06/2026

In short

CVE-2021-29642 is a MEDIUM (CVSS 5.3) vulnerability affecting gistpad (gistpad project).
Chance of exploitation in the next 30 days (EPSS): 0.94%, higher than 61.3% of all vulnerabilities.
Fix: update to 0.2.7 or later.

Package	Affected versions	Patched versions
gistpad gistpad_project	`< 0.2.7`	`0.2.7`

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.