gitleaks vulnerabilities

CVEs whose affected-version data names the gitleaks package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-63728Medium· 6.3PoC

2mo ago

Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Spri…

▾ Twilightgitleaks · gitleaksEPSS 0.21%via CVEORG