CVE Intelligence

Truffle Security Co. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Truffle Security Co. products: 1 record(s), with severity, exploitation and fixes.

TruffleHog 1

Exploited only (KEV) →

CVE-2025-41390 High · 7.8 CWE-829 Oct 20, 2025
An arbitrary code execution vulnerability exists in the git functionality of Truffle…
An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co. TruffleHog 3.90.2. A specially crafted repository can lead to a arbitrary code execution. An attacker can provide a malicious respository to trigger this vulnerability.