737 matches found
KLA89352 OAF vulnerability in Git LFS
Path traversal vulnerability was found in Git LFS. Malicious users can exploit this vulnerability to overwrite arbitrary files. Original advisories Fixed in Git LFS 3.7.1 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-26625 critical Solution Update to the latest...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: kuberay-operator, addon-resizer, cluster-api, php-fpmexporter, stakater-reloader, checksec, blobfuse2, git-lfs, gitsign, karma-fips, modelmesh-runtime-adapter, mongodb-kubernetes-operator, newrelic-fluent-bit-output, etcd-fips, configmap-reload-fips,...
SUSE SLED15: git / git-arch / git-core / git-credential-libsecret / git-cvs / etc (SUSE-SU-2025:03012-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03012-1 advisory. git was updated from version 2.43.0 to 2.51.0 bsc1243197: - Security issues fixed: CVE-2025-276...
CVE-2025-58158
Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server Gitness exposes api to retrieve and upload files via git LFS. Implementation ...
security update for git, git-lfs, obs-scm-bridge, python-PyYAML
This update for git, git-lfs, obs-scm-bridge, python-PyYAML fixes the following issues: git was updated from version 2.43.0 to 2.51.0 bsc1243197: Security issues fixed: CVE-2025-27613 Fixed arbitrary writable file creation and truncation in Gitkbsc1245938 CVE-2025-27614 Fixed arbitrary script...
SUSE-SU-2025:03012-1 security update for git, git-lfs, obs-scm-bridge, python-PyYAML
This update for git, git-lfs, obs-scm-bridge, python-PyYAML fixes the following issues: git was updated from version 2.43.0 to 2.51.0 bsc1243197: - Security issues fixed: CVE-2025-27613 Fixed arbitrary writable file creation and truncation in Gitkbsc1245938 CVE-2025-27614 Fixed arbitrary script...
CVE-2025-58158: Improper Limitation of a Pathname to a Restricted Directory
Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries. Prior to version 3.3.0, Open Source Harness git LFS server Gitness exposes api to retrieve and upload files via git LFS. Implementation ...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: k8ssandra-operator, docker-machine-driver-harvester, cert-manager-cmctl-fips, kube-logging-operator, kafkaexporter, blob-csi, kube-rbac-proxy, terraform-provider-kubernetes, ip-masq-agent, flux-helm-controller, aws-iam-authenticator, kubebuilder, cert-manager-fips,...
Linux Distros Unpatched Vulnerability : CVE-2024-53263
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the...
git-lfs security update
An update is available for git-lfs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, videos...
git-lfs-3.7.0-1.1 on GA media (moderate)
git-lfs-3.7.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15220-1 Rating: moderate Cross-References: CVE-2025-22869 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
AlmaLinux 9 : git-lfs (ALSA-2025:9106)
The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:9106 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fro...
AlmaLinux 9 : git-lfs (ALSA-2025:7256)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:7256 advisory. golang: crypto/tls: panic when processing post-handshake message on QUIC connections CVE-2023-39321 golang: crypto/tls: lack of a limit on buffered...
AlmaLinux 8 : git-lfs (ALSA-2025:9060)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:9060 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fro...
Oracle Linux 10 : git-lfs (ELSA-2025-9063)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9063 advisory. 3.6.1-2 - Rebuild with new Golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...
RHSA-2025:9313 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
Moderate: Red Hat Security Advisory: git-lfs security update
An update for git-lfs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
RHEL 8 : git-lfs (RHSA-2025:9313)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:9313 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...