FazBrowse GitHub Viewer | Trending | | Home

Tools: [Download Repo ZIP] [Original HTTPS Page]

Overview · getsops/sops · GitHub

Security

No security policy detected

This project has not set up a SECURITY.md file yet.

Report a vulnerability

Switching user in `sops exec-file` and `sops exec-env` sets user's UID as GID (Unix only)
GHSA-pvcx-747w-54qw published Aug 14, 2026 by felixfontein

Low
Memory exhaustion when decrypting untrusted INI or DotEnv files
GHSA-hqjv-fvgv-rh27 published Aug 14, 2026 by felixfontein

Moderate
HC Vault / OpenBao token exfiltration when decrypting untrusted SOPS-encrypted files
GHSA-jgf3-f6rg-8x3h published Aug 14, 2026 by felixfontein

High
Path traversal in `sops exec-file --filename` leaks decrypted plaintext outside temporary directory
GHSA-x4cm-pcq4-39j4 published Aug 14, 2026 by felixfontein

Moderate
Local directory executable lookup in sops (Windows-only)
GHSA-x5c7-x7m2-rhmf published Apr 22, 2021 by ajvb

Low

Learn more about advisories related to getsops/sops in the GitHub Advisory Database

Back | FazBrowse Home | New Git URL