45 matches found
GO-2022-1059 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips, kube-state-metrics, terraform-provider-sendgrid, k3d, vt-cli, gitleaks, php-fpmexporter, hey, kubeflow-fips, kubeflow...
GO-2021-0113 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, k3d, vt-cli, gitleaks, hey...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: nuclei, cg, trufflehog-fips, filebrowser, mattermost, chainctl, k9s-fips, grype-db, undock, chezmoi, grype, kots, syft, gptscript, zarf, wolfictl, kubescape, gitleaks, k9s, trufflehog, mattermost-fips, syft-fips, gotenberg, grype-fips...
GO-2025-3922 vulnerabilities
Vulnerabilities for packages: nsc, k9s, opentofu, steampipe, trufflehog, gptscript, gitness, guac, zot, kubescape-operator, terraform, rancher-fleet, podman, terragrunt, gitleaks, nuclei, trivy-operator, tflint, zarf, envoy-gateway, filebrowser, grafana-alloy, trivy, xeol, vcluster, undock...
GO-2022-1059 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, grpcurl, hey, php-fpmexporter, gitleaks, vt-cli, k3d, dynamic-localpv-provisioner, kubeflow...
GO-2021-0113 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, hey, gitleaks, vt-cli, k3d, dynamic-localpv-provisioner...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: trufflehog, gptscript, k9s, wolfictl, gitleaks, chezmoi, syft, zarf, filebrowser, kubescape, grype, nuclei, kots, undock...
CVE-2026-63728
A flaw was found in Gitleaks. This template injection vulnerability allows an attacker who can influence report templates to read arbitrary environment variables. By leveraging non-hermetic Sprig template functions, attackers can craft malicious report templates to extract sensitive data such as...
CVE-2026-63728
Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...
CVE-2026-63728
Gitleaks before version 8.30.1 is affected by a template injection vulnerability in the report template feature. Attackers who can supply or influence report templates can leverage non-hermetic Sprig template functions (env, expandenv, getHostByName) to read arbitrary environment variables and ex...
CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature
Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...
CVE-2026-63728
Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...
CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature
Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...
PT-2026-61746
Name of the Vulnerable Software and Affected Versions Gitleaks versions prior to 8.30.1 Description A template injection issue exists where attackers who can supply or influence report templates can read arbitrary environment variables and exfiltrate sensitive data. This is achieved by leveraging...
Fedora: Security Advisory (FEDORA-2025-55bf0b6949)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 43 Update: gitleaks-8.30.0-1.fc43
Scan git repos or files for secrets using regex and entropy...
Fedora 43 : gitleaks (2025-55bf0b6949)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-55bf0b6949 advisory. Update to 8.30.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: yunikorn-k8shim-fips, hydra-fips, kafkaexporter, spicedb-operator, cloud-provider-azure-fips, cue-fips, nvidia-nsight-compute-13.0, scorecard, container-object-storage-interface-fips, kubeflow, pulumi-language-dotnet, sbom-convert, amazon-ssm-agent-fips,...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: runc, spark-operator, sftpgo-plugin-kms, kube-vip, kubeflow, rabbitmq-messaging-topology-operator, kube-vip-cloud-provider, src-fingerprint, gitlab-pages, pdfcpu, policy-controller, temporal-ui-server, terraform-provider-tls, kapp, rancher-fleet,...