CVE-2016-10526

CVE-2016-10526 describes an information disclosure vulnerability in grunt-gh-pages versions prior to 0.9.1. When deploying to GitHub Pages via a CI system, the module would inadvertently log the GitHub token used for authentication, potentially exposing it if the logs were publicly accessible. This vulnerability carries a high CVSS score of 8.6, indicating a network-based attack with low complexity, requiring no user interaction, and leading to high confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.