Lucene search
+L

1739 matches found

Github Security Blog
Github Security Blog
added 2025/10/17 5:05 p.m.11 views

Git LFS may write to arbitrary files via crafted symlinks

Impact When populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links exist which collide with the paths of files tracked by Git LFS. Git LFS has resolved this...

8.6CVSS6.9AI score0.00697EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
added 2025/10/17 5:05 p.m.7 views

EUVD-2025-34886

Git LFS may write to arbitrary files via crafted symlinks...

8.6CVSS6.6AI score0.00697EPSS
SaveExploits0References7
OSV
OSV
added 2025/10/17 5:05 p.m.8 views

GHSA-6PVW-G552-53C5 Git LFS may write to arbitrary files via crafted symlinks

Impact When populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links exist which collide with the paths of files tracked by Git LFS. Git LFS has resolved this...

8.6CVSS6.9AI score0.00697EPSS
SaveExploits0References9
OSV
OSV
added 2025/10/17 4:15 p.m.3 views

DEBIAN-CVE-2025-26625

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links...

8.6CVSS7.3AI score0.00697EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/17 4:15 p.m.13 views

UBUNTU-CVE-2025-26625

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links...

8.6CVSS5.9AI score0.00697EPSS
SaveExploits0References11
AlpineLinux
AlpineLinux
added 2025/10/17 3:30 p.m.9 views

CVE-2025-26625

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links...

8.6CVSS7.1AI score0.00697EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/10/17 3:30 p.m.17 views

CVE-2025-26625 Git LFS may write to arbitrary files via crafted symlinks

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links...

8.6CVSS0.00697EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/17 3:30 p.m.3 views

CVE-2025-26625 Git LFS may write to arbitrary files via crafted symlinks

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links...

8.6CVSS6.6AI score0.00697EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/17 3:30 p.m.8 views

CVE-2025-26625 Git LFS may write to arbitrary files via crafted symlinks

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links...

8.6CVSS7.1AI score
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2025/10/09 5:10 a.m.8 views

CVE-2025-11462

Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...

9.3CVSS7.7AI score0.00213EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/07 7:19 p.m.16 views

CLSA-2025-1759864776 Fix CVE(s): CVE-2025-6020

SECURITY UPDATE: fix privilege escalation in pamnamespace - debian/patches-applied/CVE-2025-6020-pre.patch: prerequisite changes - debian/patches-applied/CVE-2025-6020.patch: enforce proper handling of instance directory symlinks to prevent mounting arbitrary paths - CVE-2025-6020...

7.8CVSS7.3AI score0.00438EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2013-1467

Malware in sbrugna...

6.3CVSS6.5AI score0.01297EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-2468

Malware in sbrugna...

7.8CVSS6.7AI score0.00374EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2015-0809

Malware in sbrugna...

7.8CVSS6.9AI score0.0086EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2001-0890

Malware in sbrugna...

2.1CVSS6.4AI score0.00789EPSS
SaveExploits1References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2019-13325

Malware in sbrugna...

7.8CVSS7.3AI score0.00423EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2001-1312

Malware in sbrugna...

1.2CVSS6.4AI score0.00295EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-18394

Malware in sbrugna...

6.8CVSS6.5AI score0.04193EPSS
SaveExploits1References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2020-2272

Malware in sbrugna...

7.1CVSS6.7AI score0.00709EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2010-4782

Malware in sbrugna...

5.5CVSS5.4AI score0.00406EPSS
SaveExploits0References6
Rows per page
Query Builder