Skip to content
OpenAdvisories

Vendor

gitleaks

2 known vulnerabilities.

Products

gitleaks 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-124039

    Gitleaks through 8.30.1 World-Readable Report Files via --report-path

    Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local us…

    gitleaks gitleaks