GO-2024-3076: Trufflehog vulnerable to Blind SSRF in some Detectors in github.com/trufflesecurity/trufflehog

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/trufflesecurity/trufflehog

Links

Open Source Insights

Directories ¶

Path	Synopsis
cache Package cache provides an interface which can be implemented by different cache types.	Package cache provides an interface which can be implemented by different cache types.
memory
common
config
context
custom_detectors
decoders
detectors
abbysale
abstract
abuseipdb
accuweather
adafruitio
adobeio
adzuna
aeroworkflow
agora
aha
airbrakeprojectkey
airbrakeuserkey
airship
airtableapikey
airvisual
alchemy
alconost
alegra
aletheiaapi
algoliaadminkey
alibaba
alienvault
allsports
amadeus
ambee
amplitudeapikey
anypoint
apacta
api2cart
apideck
apiflash
apifonica
apify
apilayer
apimatic
apiscience
apitemplate
apollo
appcues
appfollow
appointedd
appsynergy
apptivo
artifactory
artsy
asanaoauth
asanapersonalaccesstoken
assemblyai
atera
audd
auth0managementapitoken
auth0oauth
autodesk
autoklose
autopilot
avazapersonalaccesstoken
aviationstack
aws
axonaut
aylien
ayrshare
azure
bannerbear
baremetrics
baseapiio
beamer
beebole
besnappy
besttime
billomat
bitbar
bitcoinaverage
bitfinex
bitlyaccesstoken
bitmex
blablabus
blazemeter
blitapp
blocknative
blogger
bombbomb
boostnote
borgbase
braintreepayments
brandfetch
browserstack
browshot
bscscan
buddyns
bugherd
bugsnag
buildkite
bulbul
bulksms
buttercms
caflou
calendarific
calendlyapikey
calorieninja
campayn
cannyio
capsulecrm
captaindata
carboninterface
cashboard
caspio
censys
centralstationcrm
cexio
chartmogul
chatbot
chatfule
checio
checklyhq
checkout
checkvist
cicero
circleci
clarifai
clearbit
clickhelp
clicksendsms
clickuppersonaltoken
cliengo
clinchpad
clockify
clockworksms
closecrm
cloudconvert
cloudelements
cloudflareapitoken
cloudflarecakey
cloudflareglobalapikey
cloudimage
cloudmersive
cloudplan
cloudsmith
cloverly
cloze
clustdoc
codacy
codeclimate
codemagic
codequiry
coinapi
coinbase
coinlayer
coinlib
coinmarketcap
collect2
column
commercejs
commodities
companyhub
confluent
contentfulpersonalaccesstoken
conversiontools
convertapi
convertkit
convier
copper
countrylayer
courier
coveralls
craftmypdf
crossbrowsertesting
crowdin
cryptocompare
currencycloud
currencyfreaks
currencylayer
currencyscoop
currentsapi
customerguru
customerio
d7network
dailyco
dandelion
dareboost
databox
datadogtoken
datafire
datagov
debounce
deepai
deepgram
delighted
demio
deputy
detectify
detectlanguage
dfuse
diffbot
diggernaut
digitaloceantoken
digitaloceanv2
discordbottoken
discordwebhook
disqus
ditto
dnscheck
docparser
documo
doppler
dotmailer
dovico
dronahq
droneci
dropbox
duply
dwolla
dynalist
dyspatch
eagleeyenetworks
easyinsight
ecostruxureit
edamam
edenai
eightxeight
elasticemail
enablex
enigma
etherscan
ethplorer
etsyapikey
everhour
exchangerateapi
exchangeratesapi
exportsdk
extractorapi
facebookoauth
faceplusplus
fakejson
fastforex
fastlypersonaltoken
feedier
fetchrss
fibery
figmapersonalaccesstoken
fileio
finage
financialmodelingprep
findl
finnhub
fixerio
flatio
fleetbase
flickr
flightapi
flightlabs
flightstats
float
flowdash
flowdock
flowflu
flutterwave
fmfw
formbucket
formcraft
formio
formsite
foursquare
frameio
freshbooks
freshdesk
front
ftp
fulcrum
fullstory
fusebill
fxmarket
gcp
geckoboard
gemini
generic
gengo
geoapify
geocode
geocodify
geocodio
geoipifi
getemail
getemails
getgeoapi
getgist
getresponse
getsandbox
github
github_old
githubapp
gitlab
gitlabv2
gitter
glassnode
glitterlyapi
gocanvas
gocardless
goodday
graphcms
graphhopper
groovehq
gtmetrix
guardianapi
gumroad
guru
gyazo
happi
happyscribe
harvest
heatmapapi
hellosign
helpcrunch
helpscout
hereapi
heroku
hive
hiveage
holidayapi
holistic
honeycomb
host
html2pdf
hubspotapikey
humanity
hunter
hybiscus
hypertrack
ibmclouduserkey
iconfinder
iexapis
iexcloud
image4
imagekit
imagga
impala
infura
insightly
instabot
integromat
intercom
interseller
intrinio
invoiceocean
ipapi
ipgeolocation
ipify
ipinfodb
ipquality
ipstack
jdbc
jiratoken
jotform
jumpcloud
juro
kanban
kanbantool
karmacrm
keenio
kickbox
klipfolio
knapsackpro
kontent
kraken
kucoin
kylas
languagelayer
lastfm
launchdarkly
ldap
leadfeeder
lemlist
lendflow
lessannoyingcrm
lexigram
linearapi
linemessaging
linenotify
linkpreview
liveagent
livestorm
loadmill
lob
locationiq
loginradius
lokalisetoken
loyverse
lunchmoney
luno
m3o
macaddress
madkudu
magicbell
magnetic
mailboxlayer
mailchimp
mailerlite
mailgun
mailjetbasicauth
mailjetsms
mailmodo
mailsac
mandrill
manifest
mapbox
mapquest
marketstack
mattermostpersonaltoken
mavenlink
maxmindlicense
meaningcloud
mediastack
meistertask
mesibo
messagebird
metaapi
metrilo
microsoftteamswebhook
midise
mindmeister
miro
mite
mixmax
mixpanel
mockaroo
moderation
monday
mongodb
monkeylearn
moonclerk
moosend
moralis
mrticktock
mux
myfreshworks
myintervals
nasdaqdatalink
nethunt
netlify
neutrinoapi
newrelicpersonalapikey
newsapi
newscatcher
nexmoapikey
nftport
ngc
nicereply
nightfall
nimble
nitro
noticeable
notion
nozbeteams
npmtoken
npmtokenv2
numverify
nutritionix
nylas
nytimes
oanda
okta
omnisend
onedesk
onelogin
onepagecrm
onesignal
onwaterio
oopspam
openai
opencagedata
opengraphr
openuv
openweather
optimizely
owlbot
packagecloud
pagerdutyapikey
pandadoc
pandascore
paperform
paralleldots
parsehub
parsers
parseur
partnerstack
passbase
pastebin
paydirtapp
paymoapp
paymongo
paypaloauth
paystack
pdflayer
pdfshift
peopledatalabs
pepipost
pinata
pipedream
pipedrive
pivotaltracker
pixabay
plaidkey
planviewleankit
planyo
plivo
podio
pollsapi
poloniex
polygon
positionstack
postageapp
postbacks
posthog
postman
postmark
powrbot
privatekey
prodpad
prospectcrm
prospectio
protocolsio
proxycrawl
pubnubpublishkey
pubnubsubscriptionkey
purestake
pushbulletapikey
pusherchannelkey
qase
qualaroo
qubole
quickmetrics
rabbitmq
rapidapi
raven
rawg
razorpay
reachmail
readme
reallysimplesystems
rebrandly
rechargepayments
redis
refiner
rentman
repairshopr
restpack
restpackhtmltopdfapi
restpackscreenshotapi
rev
revampcrm
ringcentral
ritekit
roaring
rocketreach
rockset
roninapp
route4me
rownd
rubygems
runrunit
salesblink
salescookie
salesflare
salesmate
satismeterprojectkey
satismeterwritekey
saucelabs
scalewaykey
scalr
scrapeowl
scraperapi
scraperbox
scrapersite
scrapestack
scrapfly
scrapingant
scrapingbee
screenshotapi
screenshotlayer
scrutinizerci
securitytrails
segmentapikey
selectpdf
semaphore
sendbird
sendbirdorganizationapi
sendgrid
sendinbluev2
sentiment
sentrytoken
serphouse
serpstack
sheety
sherpadesk
shipday
shodankey
shopify
shortcut
shotstack
shutterstock
shutterstockoauth
signable
signalwire
signaturit
signupgenius
sigopt
simfin
simplesat
simplynoted
simvoly
sinchmessage
sirv
siteleaf
skrappio
skybiometry
slack
slackwebhook
smartsheets
smartystreets
smooch
snipcart
snykkey
sonarcloud
sparkpost
speechtextai
splunkobservabilitytoken
spoonacular
sportradar
sportsmonk
spotifykey
sqlserver
square
squareapp
squarespace
squareup
sslmate
statuscake
statuspage
statuspal
stitchdata
stockdata
storecove
stormboard
stormglass
storyblok
storychief
strava
streak
stripe
stytch
sugester
sumologickey
supernotesapi
surveyanyplace
surveybot
surveysparrow
survicate
swell
swiftype
tallyfy
tatumio
taxjar
teamgate
teamworkcrm
teamworkdesk
teamworkspaces
technicalanalysisapi
tefter
telegrambottoken
teletype
telnyx
terraformcloudpersonaltoken
testingbot
text2data
textmagic
theoddsapi
thinkific
thousandeyes
ticketmaster
tickettailor
tiingo
timecamp
timezoneapi
tly
tmetric
todoist
toggltrack
tokeet
tomorrowio
tomtom
tradier
transferwise
travelpayouts
travisci
trelloapikey
tru
twelvedata
twilio
twist
twitch
twitter
tyntec
typeform
typetalk
ubidots
uclassify
unifyid
unplugg
unsplash
upcdatabase
uplead
uploadcare
uptimerobot
upwave
uri
urlscan
user
userflow
userstack
vatlayer
vbout
vercel
verifier
verimail
veriphone
versioneye
viewneo
virustotal
visualcrossing
voicegain
voodoosms
vouchery
vpnapi
vultrapikey
vyte
walkscore
weatherbit
weatherstack
webex
webflow
webscraper
webscraping
websitepulse
wepay
whoxy
wistia
wit
worksnaps
workstack
worldcoinindex
worldweather
wrike
yandex
yelp
youneedabudget
yousign
youtubeapikey
zapierwebhook
zendeskapi
zenkitapi
zenrows
zenscrape
zenserp
zeplin
zerobounce
zipapi
zipbooks
zipcodeapi
zipcodebase
zonkafeedback
zulipchat
engine
gitparse
giturl
handlers
log
output
pb
credentialspb
custom_detectorspb
detectorspb
source_metadatapb
sourcespb
protoyaml
sanitizer
sources
circleci
filesystem
gcs
git
github
gitlab
s3
syslog
updater
version

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL