Read the docs

gitleaks

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

gitleaks records in CISA KEV

No gitleaks vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-45315 CVE-2026-63728 · GHSA-mmh4-9cvr-w4cj

Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Priority HIGH 68

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging…

CVSS 4.0HIGH 8.1 Local No auth User interaction EPSS 0.00206 Published 2026-07-20 Fixed in 8.30.1 CWE-1336
TI-2026-86092 CVE-2026-124039 · GHSA-w4h6-9gpx-7gm5

World-readable Gitleaks report files via --report-path

Priority LOW 21

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00096 Published 2026-11-06 No fix listed CWE-732
Open these records in search →