Truffle Security Co. TruffleHog vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Truffle Security Co. TruffleHog: 1 record(s), with affected versions and fixes.
CVE-2025-41390
High · 7.8
CWE-829 Oct 20, 2025
An arbitrary code execution vulnerability exists in the git functionality of Truffle…
An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co. TruffleHog 3.90.2. A specially crafted repository can lead to a arbitrary code execution. An attacker can provide a malicious respository to trigger this vulnerability.