Vendor
gitleaks
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.3
Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature
Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. …