git-lfs

2 results · Feed

• High 8.6
  CVE-2025-26625

  Git LFS may write to arbitrary files via crafted symlinks

  Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git w…

  git-lfs git-lfs github.com/git-lfs/git-lfs github.com/git-lfs/git-lfs/v3 Debian Ubuntu Alpine Go
  Oct 17, 2025
• High 8.5
  CVE-2024-53263

  Git LFS permits exfiltration of credentials via crafted HTTP URLs

  Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command without checking for embedded line-ending control characters, and then…

  git-lfs git-lfs github.com/git-lfs/git-lfs github.com/git-lfs/git-lfs/v3 Debian Ubuntu Go
  Jan 14, 2025