Known vulnerabilities in git-lfs

Vendor: OpenAnolis
Software: git-lfs
Software CPE: cpe:2.3:o:openanolis:git-lfs:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 34
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting git-lfs git-lfs is affected by 34 known vulnerabilities: 2 high, 29 medium, 3 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144181 - Uncontrolled Recursion
CVE-2026-33818		 CWE-674 Medium
No
No
 3.7.1-6 18.08.2026 SB2026081856
SB2026082658
SB2026082659
and 40 more
#VU144179 - Resource exhaustion
CVE-2026-56853		 CWE-400 Medium
No
No
 3.7.1-6 18.08.2026 SB2026081856
SB2026082658
SB2026082659
and 31 more
#VU144178 - Improper control of a resource through its lifetime
CVE-2026-56862		 CWE-664 Medium
No
No
 3.7.1-6 18.08.2026 SB2026081856
SB2026082658
SB2026082659
and 42 more
#VU144174 - Resource exhaustion
CVE-2026-56860		 CWE-400 Medium
No
No
 3.7.1-6 18.08.2026 SB2026081856
SB2026082658
SB2026082659
and 45 more
#VU140611 - Double Free
CVE-2026-33811		 CWE-415 Medium
No
No
 3.4.1-12.0.1 31.07.2026 SB2026073126
SB20260731121
SB20260731123
and 14 more
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282		 CWE-367 Low
No
No
 3.4.1-10.0.1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 51 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 3.4.1-10.0.1, 3.7.1-4 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 75 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 3.4.1-10.0.1 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 63 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 3.4.1-10.0.1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 136 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 3.4.1-8.0.1, 3.7.1-3 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 145 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 3.4.1-8.0.1, 3.7.1-3 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 118 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 3.4.1-7.0.1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 147 more
#VU118253 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-26625		 CWE-59 High
No
No
 3.4.1-6.0.1, 3.7.1-1 11.11.2025 SB2025111128
SB2025111129
SB2025111130
and 22 more
#VU118191 - Resource exhaustion
CVE-2025-61724		 CWE-400 Medium
No
No
 3.7.1-2 07.11.2025 SB2025110705
SB2025110731
SB2025111491
and 20 more
#VU118187 - Resource exhaustion
CVE-2025-58185		 CWE-400 Medium
No
No
 3.7.1-3 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 116 more
#VU118183 - Improper Encoding or Escaping of Output
CVE-2025-58189		 CWE-116 Low
No
No
 3.7.1-3 07.11.2025 SB2025110705
SB2025110711
SB2025110712
and 124 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 3.4.1-5.0.1 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU87198 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45289		 CWE-200 Low
No
No
 3.4.1-1.0.1, 3.4.1-2.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 54 more
#VU87197 - Resource exhaustion
CVE-2023-45290		 CWE-400 Medium
No
No
 3.4.1-1.0.1, 3.4.1-2.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 3.4.1-1.0.1, 3.4.1-2.0.1 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more


Showing elements 1 - 20 out of 34