Skip to content
OpenAdvisories

Package · Go

github.com/git-lfs/git-lfs/v3

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-24826

    Git LFS can execute a binary from the current directory on Windows

    On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the attacker to execute arbitrary code. This does not affec…

    git-lfs git-lfs github.com/git-lfs/git-lfs github.com/git-lfs/git-lfs/v3 Go