Gitleaks

2 CVEs in 1 Gitleaks product, including Gitleaks. Newest: CVE-2026-124039 (2026-11-06). Severity, EPSS and public exploits for each.

Gitleaks products with known CVEs

ProductCVEs
Gitleaks2
Gitleaks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-124039Low3.32026-11-06Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the…
CVE-2026-63728Medium6.32026-07-21Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary envir…