Threats affecting pkg:github/gitleaks/gitleaks

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-124039Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan Medium4.82026-11-06GCVE DatabaseCVE-2026-124039 Gitleaks versions up to 8.30.1 have a vulnerability where scan report files are created with overly permissive default permissions. This allows local users on shared systems or CI runners to read plaintext secrets in the reports unless the --redact option is used. The issue is fixed in version 8.30.2. Report on CVE-2026-124039 Vulnerability CWE-732 #ghsa-w4h6-9gpx-7gm5	GCVE Database	2026-11-06

Page 1 of 1