Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: gitleaks Clear all filters
TI-2026-86092 CVE-2026-124039 · GHSA-w4h6-9gpx-7gm5

World-readable Gitleaks report files via --report-path

Priority LOW 21

Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00096 Published 2026-11-06 No fix listed CWE-732
TI-2026-45315 CVE-2026-63728 · GHSA-mmh4-9cvr-w4cj

Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Priority HIGH 68

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging…

CVSS 4.0HIGH 8.1 Local No auth User interaction EPSS 0.00206 Published 2026-07-20 Fixed in 8.30.1 CWE-1336