GO-2024-3076: Trufflehog vulnerable to Blind SSRF in some Detectors in github.com/trufflesecurity/trufflehog

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/trufflesecurity/trufflehog

Links

Open Source Insights

Directories ¶

Path	Synopsis
cache Package cache provides an interface which can be implemented by different cache types.	Package cache provides an interface which can be implemented by different cache types.
memory
cleantemp
common
glob
config
context
custom_detectors
decoders
detectors
abbysale
abstract
abuseipdb
accuweather
adafruitio
adobeio
adzuna
aeroworkflow
agora
aha
airbrakeprojectkey
airbrakeuserkey
airship
airtableapikey
airvisual
aiven
alchemy
alconost
alegra
aletheiaapi
algoliaadminkey
alibaba
alienvault
allsports
amadeus
ambee
amplitudeapikey
anthropic
anypoint
apacta
api2cart
apideck
apiflash
apifonica
apify
apilayer
apimatic
apiscience
apitemplate
apollo
appcues
appfollow
appointedd
appoptics
appsynergy
apptivo
artifactory
artsy
asanaoauth
asanapersonalaccesstoken
assemblyai
atera
audd
auth0managementapitoken
auth0oauth
autodesk
autoklose
autopilot
avazapersonalaccesstoken
aviationstack
aws
awssessionkeys
axonaut
aylien
ayrshare
azure
azurebatch
azurecontainerregistry
azurestorage
bannerbear
baremetrics
beamer
beebole
besnappy
besttime
betterstack
billomat
bitbar
bitcoinaverage
bitfinex
bitlyaccesstoken
bitmex
blazemeter
blitapp
blocknative
blogger
bombbomb
boostnote
borgbase
braintreepayments
brandfetch
browserstack
browshot
bscscan
buddyns
budibase
bugherd
bugsnag
buildkite
buildkitev2
bulbul
bulksms
buttercms
caflou
calendarific
calendlyapikey
calorieninja
campayn
cannyio
capsulecrm
captaindata
carboninterface
cashboard
caspio
censys
centralstationcrm
cexio
chartmogul
chatbot
chatfule
checio
checklyhq
checkout
checkvist
cicero
circleci
clarifai
clearbit
clickhelp
clicksendsms
clickuppersonaltoken
cliengo
clinchpad
clockify
clockworksms
closecrm
cloudconvert
cloudelements
cloudflareapitoken
cloudflarecakey
cloudflareglobalapikey
cloudimage
cloudmersive
cloudplan
cloudsmith
cloverly
cloze
clustdoc
coda
codacy
codeclimate
codemagic
codequiry
coinapi
coinbase
coinbase_waas
coinlayer
coinlib
coinmarketcap
collect2
column
commercejs
commodities
companyhub
confluent
contentfulpersonalaccesstoken
conversiontools
convertapi
convertkit
convier
copper
couchbase
countrylayer
courier
coveralls
craftmypdf
crossbrowsertesting
crowdin
cryptocompare
currencycloud
currencyfreaks
currencylayer
currencyscoop
currentsapi
customerguru
customerio
d7network
dailyco
dandelion
dareboost
databox
databrickstoken
datadogtoken
datagov
debounce
deepai
deepgram
delighted
demio
deno
deputy
detectify
detectlanguage
dfuse
diffbot
diggernaut
digitaloceantoken
digitaloceanv2
discordbottoken
discordwebhook
disqus
ditto
dnscheck
dockerhub
docparser
documo
docusign
doppler
dotmailer
dovico
dronahq
droneci
dropbox
duply
dwolla
dynalist
dyspatch
eagleeyenetworks
easyinsight
ecostruxureit
edamam
edenai
eightxeight
elasticemail
enablex
enigma
envoyapikey
etherscan
ethplorer
etsyapikey
eventbrite
everhour
exchangerateapi
exchangeratesapi
exportsdk
extractorapi
facebookoauth
faceplusplus
fastforex
fastlypersonaltoken
feedier
fetchrss
fibery
figmapersonalaccesstoken/v1
figmapersonalaccesstoken/v2
fileio
finage
financialmodelingprep
findl
finnhub
fixerio
flatio
fleetbase
flickr
flightapi
flightlabs
flightstats
float
flowdash
flowflu
flutterwave
fmfw
formbucket
formcraft
formio
formsite
foursquare
frameio
freshbooks
freshdesk
front
ftp
fulcrum
fullstory
fullstory_v2
fusebill
fxmarket
gcp
geckoboard
gemini
generic
gengo
geoapify
geocode
geocodify
geocodio
geoipifi
getemail
getemails
getgeoapi
getgist
getresponse
getsandbox
github
github_oauth2
github_old
githubapp
gitlab
gitlabv2
gitter
glassnode
gocanvas
gocardless
goodday
grafana
grafanaserviceaccount
graphcms
graphhopper
groovehq
gtmetrix
guardianapi
gumroad
guru
gyazo
happyscribe
harvest
hellosign
helpcrunch
helpscout
hereapi
heroku
hive
hiveage
holidayapi
holistic
honeycomb
host
html2pdf
hubspotapikey
huggingface
humanity
hunter
hybiscus
hypertrack
ibmclouduserkey
iconfinder
iexapis
iexcloud
imagekit
imagga
impala
infura
insightly
instabot
instamojo
integromat
intercom
interseller
intrinio
invoiceocean
ip2location
ipapi
ipgeolocation
ipify
ipinfo
ipinfodb
ipquality
ipstack
jdbc
jiratoken
jiratoken_v2
jotform
jumpcloud
juro
kanban
kanbantool
karmacrm
keenio
kickbox
klaviyo
klipfolio
knapsackpro
kontent
kraken
kucoin
kylas
languagelayer
lastfm
launchdarkly
ldap
leadfeeder
lemlist
lemonsqueezy
lendflow
lessannoyingcrm
lexigram
linearapi
linemessaging
linenotify
linkpreview
liveagent
livestorm
loadmill
lob
locationiq
loggly
loginradius
logzio
lokalisetoken
loyverse
lunchmoney
luno
m3o
macaddress
madkudu
magicbell
magnetic
mailboxlayer
mailchimp
mailerlite
mailgun
mailjetbasicauth
mailjetsms
mailmodo
mailsac
mandrill
manifest
mapbox
mapquest
marketstack
mattermostpersonaltoken
mavenlink
maxmindlicense
meaningcloud
mediastack
meistertask
mesibo
messagebird
metaapi
metabase
metrilo
microsoftteamswebhook
mindmeister
miro
mite
mixmax
mixpanel
mockaroo
moderation
monday
mongodb
monkeylearn
moonclerk
moosend
moralis
mrticktock
mux
myfreshworks
myintervals
nasdaqdatalink
nethunt
netlify
neutrinoapi
newrelicpersonalapikey
newsapi
newscatcher
nexmoapikey
nftport
ngc
ngrok
nicereply
nightfall
nimble
nitro
noticeable
notion
nozbeteams
npmtoken
npmtokenv2
nugetapikey
numverify
nutritionix
nylas
nytimes
oanda
okta
omnisend
onedesk
onelogin
onepagecrm
onesignal
onwaterio
oopspam
openai
opencagedata
opengraphr
openuv
openvpn
openweather
opsgenie
optimizely
overloop
owlbot
packagecloud
pagerdutyapikey
pandadoc
pandascore
paperform
paralleldots
parsehub
parsers
parseur
partnerstack
pastebin
paydirtapp
paymoapp
paymongo
paypaloauth
paystack
pdflayer
pdfshift
peopledatalabs
pepipost
percy
pinata
pipedream
pipedrive
pivotaltracker
pixabay
plaidkey
planetscale
planetscaledb
planviewleankit
planyo
plivo
podio
pollsapi
poloniex
polygon
portainer
portainertoken
positionstack
postageapp
postbacks
posthog
postman
postmark
powrbot
prefect
privacy
privatekey
prodpad
prospectcrm
protocolsio
proxycrawl
pubnubpublishkey
pubnubsubscriptionkey
pulumi
purestake
pushbulletapikey
pusherchannelkey
qase
qualaroo
qubole
rabbitmq
ramp
rapidapi
raven
rawg
razorpay
reachmail
readme
reallysimplesystems
rebrandly
rechargepayments
redis
refiner
rentman
repairshopr
replicate
replyio
requestfinance
restpack
restpackhtmltopdfapi
restpackscreenshotapi
rev
revampcrm
ringcentral
ritekit
roaring
rocketreach
rockset
roninapp
route4me
rownd
rubygems
runrunit
salesblink
salescookie
salesflare
salesforce
salesmate
satismeterprojectkey
satismeterwritekey
saucelabs
scalewaykey
scalr
scrapeowl
scraperapi
scraperbox
scrapestack
scrapfly
scrapingant
scrapingbee
screenshotapi
screenshotlayer
scrutinizerci
securitytrails
segmentapikey
selectpdf
semaphore
sendbird
sendbirdorganizationapi
sendgrid
sendinbluev2
sentrytoken
serphouse
serpstack
sheety
sherpadesk
shipday
shodankey
shopify
shortcut
shotstack
shutterstock
shutterstockoauth
signable
signalwire
signaturit
signupgenius
sigopt
simfin
simplesat
simplynoted
simvoly
sinchmessage
sirv
siteleaf
skrappio
skybiometry
slack
slackwebhook
smartsheets
smartystreets
smooch
snipcart
snowflake
snykkey
sonarcloud
sourcegraph
sourcegraphcody
sparkpost
speechtextai
splunkobservabilitytoken
spoonacular
sportsmonk
spotifykey
sqlserver
square
squareapp
squarespace
squareup
sslmate
statuscake
statuspage
statuspal
stitchdata
stockdata
storecove
stormboard
stormglass
storyblok
storychief
strava
streak
stripe
stripo
stytch
sugester
sumologickey
supabasetoken
supernotesapi
surveyanyplace
surveybot
surveysparrow
survicate
swell
swiftype
tailscale
tallyfy
tatumio
taxjar
teamgate
teamworkcrm
teamworkdesk
teamworkspaces
technicalanalysisapi
tefter
telegrambottoken
teletype
telnyx
terraformcloudpersonaltoken
testingbot
textmagic
theoddsapi
thinkific
thousandeyes
ticketmaster
tickettailor
tiingo
timecamp
timezoneapi
tineswebhook
tly
tmetric
todoist
toggltrack
tokeet
tomorrowio
tomtom
tradier
transferwise
travelpayouts
travisci
trelloapikey
tru
trufflehogenterprise
twelvedata
twilio
twist
twitch
twitter
tyntec
typeform
typetalk
ubidots
uclassify
unifyid
unplugg
unsplash
upcdatabase
uplead
uploadcare
uptimerobot
upwave
uri
urlscan
user
userflow
userstack
vagrantcloudpersonaltoken
vatlayer
vbout
vercel
verifier
verimail
veriphone
versioneye
viewneo
virustotal
visualcrossing
voiceflow
voicegain
voodoosms
vouchery
vpnapi
vultrapikey
vyte
walkscore
weatherbit
weatherstack
web3storage
webex
webflow
webscraper
webscraping
websitepulse
wepay
whoxy
wistia
wit
worksnaps
workstack
worldcoinindex
worldweather
wrike
yandex
yelp
youneedabudget
yousign
youtubeapikey
zapierwebhook
zendeskapi
zenkitapi
zenrows
zenscrape
zenserp
zeplin
zerobounce
zerotier
zipapi
zipbooks
zipcodeapi
zipcodebase
zonkafeedback
zulipchat
engine
gitparse
giturl
handlers
log
output
pb
credentialspb
custom_detectorspb
detectorspb
source_metadatapb
sourcespb
protoyaml
sanitizer
sources
circleci
docker
filesystem
gcs
git
github
gitlab
s3
syslog
travisci
sourcestest
tui
common
components/footer
components/formfield
components/header
components/selector
components/statusbar
components/tabs
components/textinput
components/textinputs
components/viewport
keymap
pages/contact_enterprise
pages/source_configure
pages/source_select
pages/view_oss
pages/wizard_intro
sources
sources/circleci
sources/docker
sources/filesystem
sources/gcs
sources/git
sources/github
sources/gitlab
sources/s3
sources/syslog
styles
updater
version

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL