901 matches found
CVE-2024-53263
Git LFS (Git Large File Storage) is affected by CVE-2024-53263. The vulnerability arises when Git LFS requests credentials from Git for a remote host and passes portions of the host URL to git-credential(1) without sanitizing embedded line-ending control characters. An attacker could insert URL-e...
CVE-2024-53263
Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...
CVE-2024-53263 Git LFS permits exfiltration of credentials via crafted HTTP URLs
Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...
CVE-2024-53263: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...
Git Lfs 注入漏洞
Git Lfs is a command line tool from the Git Lfs team for working with large files in git projects. An injection vulnerability exists in Git Lfs versions prior to v3.6.1. An attacker exploiting this vulnerability could retrieve a user's Git credentials...
KLA79449 OSI vulnerability in Git LFS
Information disclosure vulnerability was found in Git LFS. Malicious users can exploit this vulnerability via special crafted URL to obtain sensitive information. Original advisories Git LFS 3.6.1 Exploitation Related products Git-LFS CVE list CVE-2024-53263 critical Solution Update to the latest...
PT-2025-2951
Name of the Vulnerable Software and Affected Versions Git LFS versions prior to 3.6.1 Description Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checki...
UBUNTU-CVE-2024-53220
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to account dirty data in getsecsrequired It will trigger system panic w/ testcase in 1: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2752! RIP: 0010:newcurseg+0xc81/0x2110 Call Trace:...
Malicious code in lfs-au-website-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12152 Malicious code in lfs-au-website-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Gitlab -- vulnerabilities
Gitlab reports: Privilege Escalation via LFS Tokens DoS through uncontrolled resource consumption when viewing a maliciously crafted cargo.toml file Unintended Access to Usage Data via Scoped Tokens Gitlab DOS via Harbor registry integration Resource exhaustion and denial of service with testrepo...
RHSA-2024:3346 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
RHSA-2024:2724 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
RHSA-2024:7449 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
RHSA-2024:7455 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
RHSA-2024:7456 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
RHSA-2024:7351 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
RHSA-2024:7135 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...