Go/github.com/trufflesecurity/trufflehog CVE-2024-43379: unknown, EPSS 0.28%
Trufflehog vulnerable to Blind SSRF in some Detectors in github.com/trufflesecurity/trufflehog
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2024-3076
- https://github.com/trufflesecurity/trufflehog/security/advisories/GHSA-3r74-v83p-f4f4
- https://nvd.nist.gov/vuln/detail/CVE-2024-43379
- https://github.com/trufflesecurity/trufflehog/commit/fe5624c70923355128868cffd647b6e2cfe11443
CVE-2024-43379 · published · modified · JSON