Git Large File Storage Project vulnerabilities
We track 1 vulnerability in Git Large File Storage Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 20, 2022.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Git Large File Storage Project vulnerabilities
- 7.8 High severity
git-lfs: Untrusted Search Path
On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the attacker to execute arbitrary code. This does not affect