sops
v3.13.3Simple and flexible tool for managing secrets
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- MPL-2.0Weak copyleft · OSI-approved
- Security
- 5 advisories1 high, 2 medium, 2 low
- Supported versions
- No scheduleendoflife.date does not track this project
23.7k stars · 1.1k forks · 473 open issues · last release 3 months ago · data checked 36 minutes ago
Security advisories
All advisories on GitHubThe 5 most recent advisories published by the maintainers: 1 high, 2 medium, 2 low. Check the patched version against the one you run.
- lowGHSA-pvcx-747w-54qwAug 14, 2026Switching user in `sops exec-file` and `sops exec-env` sets user's UID as GID (Unix only)
- Affected
- < 3.13.0
- Patched in
- 3.13.2
- mediumGHSA-x4cm-pcq4-39j4Aug 14, 2026Path traversal in `sops exec-file --filename` leaks decrypted plaintext outside temporary directory
- Affected
- < 3.13.0
- Patched in
- 3.13.0
- mediumGHSA-hqjv-fvgv-rh27Aug 14, 2026Memory exhaustion when decrypting untrusted INI or DotEnv files
- Affected
- < 3.13.0
- Patched in
- 3.13.0
- highGHSA-jgf3-f6rg-8x3hAug 14, 2026HC Vault / OpenBao token exfiltration when decrypting untrusted SOPS-encrypted files
- Affected
- *
- lowGHSA-x5c7-x7m2-rhmfApr 22, 2021Local directory executable lookup in sops (Windows-only)
- Affected
- < v3.7.0
- Patched in
- v3.7.1