CVE-2021-29642: Gistpad Project Gistpad

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens.

Affected products

• Gistpad Project Gistpad: before 0.2.7 (fixed in 0.2.7)

Published 2021-03-30. Last modified 2026-06-17.