All products

github.com/git-lfs/git-lfs/v3

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Git LFS may write to arbitrary files via crafted symlinksCVE-2025-26625 · GHSA-6PVW-G552-53C5Version ranges need review. github.com/git-lfs/git-lfs/v3github.com/git-lfs/git-lfs Go High Fix reported
Git LFS permits exfiltration of credentials via crafted HTTP URLsCVE-2024-53263 · GHSA-Q6R2-X2CC-VRP7Version ranges need review. github.com/git-lfs/git-lfs/v3github.com/git-lfs/git-lfs Go High Fix reported
Git LFS can execute a binary from the current directory on WindowsCVE-2022-24826 · GHSA-6RW3-3WHW-JVJJ github.com/git-lfs/git-lfs/v3github.com/git-lfs/git-lfs Go Critical Fix reported