Skip to content

Vendor

trufflesecurity vulnerabilities

1 published CVE affecting trufflesecurity, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
1
Unscored
0
CISA KEV
0
Atom feed of trufflesecurity alerts

Products

Latest trufflesecurity CVEs

Newest publication first

  1. CVE-2024-43379 TruffleHog has a Blind SSRF in some Detectors

    Published
    LowCVSS 3.1 EPSS 0.28%

    TruffleHog is a secrets scanning tool. Prior to v3.81.9, this vulnerability allows a malicious actor to craft data in a way that, when scanned by specific detectors, could trigger the detector to make an unauthorized request to an endpoint chosen by the attacker. For an exploit t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.