GI
Product
git-lfs
2
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add git-lfs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-26625 | 8.6 | Oct 17 | Git LFS may write to arbitrary files via crafted symlinks Affected: >= 0.5.2, < 3.7.1 |
| CVE-2024-53263 | 8.5 | Jan 14 | Git LFS permits exfiltration of credentials via crafted HTTP URLs Affected: >= 0.1.0, < 3.6.1 |
Showing 2