Known vulnerabilities in git-lfs

Vendor: OpenAnolis
Software: git-lfs
Software CPE: cpe:2.3:o:openanolis:git-lfs:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 30
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting git-lfs git-lfs is affected by 30 known vulnerabilities: 2 high, 25 medium, 3 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140611 - Double Free
CVE-2026-33811		 CWE-415 Medium
No
No
 3.4.1-12.0.1 31.07.2026 SB2026073126
SB20260731121
SB20260731123
and 9 more
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282		 CWE-367 Low
No
No
 3.4.1-10.0.1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 49 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 3.4.1-10.0.1, 3.7.1-4 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 65 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 3.4.1-10.0.1 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 59 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 3.4.1-10.0.1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 130 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 3.4.1-8.0.1, 3.7.1-3 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 142 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 3.4.1-8.0.1, 3.7.1-3 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 112 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 3.4.1-7.0.1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU118253 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-26625		 CWE-59 High
No
No
 3.4.1-6.0.1, 3.7.1-1 11.11.2025 SB2025111128
SB2025111129
SB2025111130
and 19 more
#VU118191 - Resource exhaustion
CVE-2025-61724		 CWE-400 Medium
No
No
 3.7.1-2 07.11.2025 SB2025110705
SB2025110731
SB2025111491
and 20 more
#VU118187 - Resource exhaustion
CVE-2025-58185		 CWE-400 Medium
No
No
 3.7.1-3 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 112 more
#VU118183 - Improper Encoding or Escaping of Output
CVE-2025-58189		 CWE-116 Low
No
No
 3.7.1-3 07.11.2025 SB2025110705
SB2025110711
SB2025110712
and 120 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 3.4.1-5.0.1 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU102873 - Improper input validation
CVE-2024-53263		 CWE-20 Medium
No
No
 3.4.1-4.0.1, 3.6.1-1 16.01.2025 SB2025011645
SB2025011648
SB2025011649
and 15 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 3.4.1-3.0.1 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 3.4.1-1.0.1, 3.4.1-2.0.1 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 3.4.1-1.0.1, 3.4.1-2.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 3.4.1-1.0.1, 3.4.1-2.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 3.4.1-1.0.1, 3.4.1-2.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU66068 - Resource exhaustion
CVE-2022-30635		 CWE-400 Medium
No
No
 2.13.3-3.0.1, 3.4.1-3.0.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more


Showing elements 1 - 20 out of 30