Skip to content
OpenAdvisories

Package · Go

github.com/git-lfs/git-lfs

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-24826

    Git LFS can execute a binary from the current directory on Windows

    On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the attacker to execute arbitrary code. This does not affec…

    git-lfs git-lfs github.com/git-lfs/git-lfs github.com/git-lfs/git-lfs/v3 Go
  • Critical 9.8
    CVE-2020-27955 Public exploit EPSS 82%

    Git LFS can execute a Git binary from the current directory

    Git LFS 2.12.0 allows Remote Code Execution.

    github.com/git-lfs/git-lfs Go