git-lfs vulnerabilities

4 published CVEs name git-lfs among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 0
Critical: 1
Known exploited: 0

Critical 1High 3Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20211
20221
20252

Newest CVEs

CVE-2025-26625
Git LFS may write to arbitrary files via crafted symlinks
git-lfs · git-lfs
High8.6
CVE-2024-53263
Git LFS permits exfiltration of credentials via crafted HTTP URLs
git-lfs · git-lfs
High8.5
CVE-2022-24826
Git LFS can execute a binary from the current directory on Windows
git-lfs · git-lfs
Critical9.8
CVE-2021-21237
Git LFS can execute a Git binary from the current directory on Windows
git-lfs · git-lfs
High7.2

Products with the most CVEs

git-lfs4

Most common weaknesses