CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks before version 8.30.1 is affected by a template injection vulnerability in the report template feature. Attackers who can supply or influence report templates can leverage non-hermetic Sprig template functions (env, expandenv, getHostByName) to read arbitrary environment variables and ex...

PT-2026-61746

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

Fedora: Security Advisory (FEDORA-2025-55bf0b6949)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 43 Update: gitleaks-8.30.0-1.fc43

Scan git repos or files for secrets using regex and entropy...

Fedora 43 : gitleaks (2025-55bf0b6949)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-55bf0b6949 advisory. Update to 8.30.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, custom-pod-autoscaler-fips, s5cmd, longhorn-share-manager-fips, syft-fips, timestamp-authority, sftpgo-plugin-pubsub, eks-distro-fips, src-fingerprint, addon-resizer-fips, external-dns-fips, buildkitd-fips, terraform-provider-time,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, glab, multus-cni, podinfo, rootlesskit, gogatekeeper, kubernetes-csi-driver-hostpath, steampipe, kuma, dgraph, node-feature-discovery, prometheus, jaeger-operator, jitsucom-bulker, kubeflow-pipelines, neuvector-dbgen, sbom-convert, pluto,...

[SECURITY] Fedora 42 Update: gitleaks-8.29.0-1.fc42

Scan git repos or files for secrets using regex and entropy...

Fedora 42 : gitleaks (2025-a10fad6506)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a10fad6506 advisory. Update to 8.29.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora: Security Advisory (FEDORA-2025-d3cfe902f5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 41 Update: gitleaks-8.28.0-1.fc41

Scan git repos or files for secrets using regex and entropy...

[SECURITY] Fedora 42 Update: gitleaks-8.28.0-1.fc42

Scan git repos or files for secrets using regex and entropy...

[SECURITY] Fedora 43 Update: gitleaks-8.28.0-1.fc43

Scan git repos or files for secrets using regex and entropy...

Fedora: Security Advisory (FEDORA-2025-a1a4cba6f5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-94112c7319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : gitleaks (2025-d3cfe902f5)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d3cfe902f5 advisory. Update to 8.28.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 42 : gitleaks (2025-94112c7319)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-94112c7319 advisory. Update to 8.28.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 41 : gitleaks (2025-a1a4cba6f5)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a1a4cba6f5 advisory. Update to 8.28.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...