Truffle Security Co. vulnerabilities
We track 1 vulnerability in Truffle Security Co. products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2025.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Truffle Security Co. vulnerabilities
- 7.8 High severity
TruffleHog: Inclusion of Functionality from Untrusted Control Sphere
An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co. TruffleHog 3.90.2. A specially crafted repository can lead to a arbitrary code execution. An attacker can provide a malicious respository to trigger this vulnerab