git-lfs vulnerabilities
4 published CVEs name git-lfs among the affected products.
- 4Published CVEs4 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-26625
Git LFS may write to arbitrary files via crafted symlinks
git-lfs · git-lfs
High8.6 - CVE-2024-53263
Git LFS permits exfiltration of credentials via crafted HTTP URLs
git-lfs · git-lfs
High8.5 - CVE-2022-24826
Git LFS can execute a binary from the current directory on Windows
git-lfs · git-lfs
Critical9.8 - CVE-2021-21237
Git LFS can execute a Git binary from the current directory on Windows
git-lfs · git-lfs
High7.2