github.com/git-lfs/git-lfs
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Git LFS may write to arbitrary files via crafted symlinks | github.com/git-lfs/git-lfs/v3github.com/git-lfs/git-lfs | Go | High | Fix reported | |
| Git LFS permits exfiltration of credentials via crafted HTTP URLs | github.com/git-lfs/git-lfs/v3github.com/git-lfs/git-lfs | Go | High | Fix reported | |
| GitHub Git LFS Arbitrary command execution vulnerability | github.com/git-lfs/git-lfs | Go | High | Fix reported | |
| Git LFS can execute a Git binary from the current directory on Windows | github.com/git-lfs/git-lfs | Go | High | Fix reported | |
| Git LFS can execute a Git binary from the current directory | github.com/git-lfs/git-lfs | Go | Critical | Fix reported | |
| Git LFS can execute a binary from the current directory on Windows | github.com/git-lfs/git-lfs/v3github.com/git-lfs/git-lfs | Go | Critical | Fix reported |