Skip to content
OpenAdvisories

Vendor

gitleaks

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.3

    Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

    Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. …