trufflehog
v3.99.9Find, verify, and analyze leaked credentials
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- AGPL-3.0Copyleft · OSI-approved
- Security
- 2 advisories1 medium, 1 low · Scorecard 7.6/10
- Supported versions
- No scheduleendoflife.date does not track this project
29.4k stars · 2.8k forks · 613 open issues · last release 2 days ago · data checked 2 hours ago
Security advisories
All advisories on GitHubThe 2 most recent advisories published by the maintainers: 1 medium, 1 low. Check the patched version against the one you run.
- mediumGHSA-fg8w-m62h-jvvwOct 8, 2026Workflow command injection via filenames in --github-actions output
- Affected
- >= 3.31.0, < 3.98.0
- Patched in
- 3.98.0
- lowCVE-2024-43379Aug 17, 2024Blind SSRF in some Detectors
- Affected
- <v3.81.9
- Patched in
- v3.81.9