CVE-2026-63728

A flaw was found in Gitleaks. This template injection vulnerability allows an attacker who can influence report templates to read arbitrary environment variables. By leveraging non-hermetic Sprig template functions, attackers can craft malicious report templates to extract sensitive data such as...

CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks before version 8.30.1 is affected by a template injection vulnerability in the report template feature. Attackers who can supply or influence report templates can leverage non-hermetic Sprig template functions (env, expandenv, getHostByName) to read arbitrary environment variables and ex...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

PT-2026-61746

Name of the Vulnerable Software and Affected Versions Gitleaks versions prior to 8.30.1 Description A template injection issue exists where attackers who can supply or influence report templates can read arbitrary environment variables and exfiltrate sensitive data. This is achieved by leveraging...

Fedora: Security Advisory (FEDORA-2025-55bf0b6949)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 43 Update: gitleaks-8.30.0-1.fc43

Scan git repos or files for secrets using regex and entropy...

Fedora 43 : gitleaks (2025-55bf0b6949)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-55bf0b6949 advisory. Update to 8.30.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: longhorn-manager-fips, spegel, blob-csi-fips, k8s-device-plugin, chainctl, opentelemetry-operator, flux-source-controller-fips, nri-rabbitmq, rancher-machine, velero-plugin-for-microsoft-azure-fips, monstache, grafana-alloy, cluster-api-gcp-controller-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, gitlab-pages, flannel-cni-plugin, nri-mysql, stakater-reloader, k8sgpt-operator, nsc, k8sgateway, pguser, tempo, gobump, gomplate, minio-operator, minio-object-browser, gitleaks, rclone, guac, k8s-device-plugin, kubeflow-pipelines, mod...

[SECURITY] Fedora 42 Update: gitleaks-8.29.0-1.fc42

Scan git repos or files for secrets using regex and entropy...

Fedora 42 : gitleaks (2025-a10fad6506)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a10fad6506 advisory. Update to 8.29.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora: Security Advisory (FEDORA-2025-d3cfe902f5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 41 Update: gitleaks-8.28.0-1.fc41

Scan git repos or files for secrets using regex and entropy...

[SECURITY] Fedora 42 Update: gitleaks-8.28.0-1.fc42

Scan git repos or files for secrets using regex and entropy...

[SECURITY] Fedora 43 Update: gitleaks-8.28.0-1.fc43

Scan git repos or files for secrets using regex and entropy...

Fedora 42 : gitleaks (2025-94112c7319)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-94112c7319 advisory. Update to 8.28.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora: Security Advisory (FEDORA-2025-94112c7319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...