Known vulnerabilities in git-lfs

Vendor: openEuler
Software: git-lfs
Software CPE: cpe:2.3:o:openeuler:git-lfs:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting git-lfs git-lfs is affected by 11 known vulnerabilities: 3 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118253 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-26625
CWE-59 High
No
No
3.6.1-2, 3.6.1-3 11.11.2025 SB2025111128
SB2025111129
SB2025111130
and 22 more
#VU118189 - Improper input validation
CVE-2025-58188
CWE-20 Medium
No
No
3.6.1-2, 3.6.1-3 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 116 more
#VU118179 - Resource exhaustion
CVE-2025-61725
CWE-400 Medium
No
No
3.6.1-2, 3.6.1-3 07.11.2025 SB2025110705
SB2025110714
SB2025110715
and 78 more
#VU114341 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-4674
CWE-78 High
No
No
3.6.1-2, 3.6.1-3 21.08.2025 SB2025082138
SB2025082164
SB2025082165
and 21 more
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47907
CWE-362 Low
No
No
3.6.1-2, 3.6.1-3 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 52 more
#VU112646 - Product UI does not Warn User of Unsafe Actions
CVE-2025-46835
CWE-356 Medium
No
No
3.6.1-2, 3.6.1-3 09.07.2025 SB2025070994
SB20250709121
SB2025071019
and 24 more
#VU112643 - Improper input validation
CVE-2025-27614
CWE-20 High
No
No
3.6.1-2, 3.6.1-3 09.07.2025 SB2025070994
SB20250709119
SB2025071019
and 20 more
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-48384
CWE-93 Medium
Available
Exploited
3.6.1-2, 3.6.1-3 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 54 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874
CWE-693 Low
No
No
3.6.1-2, 3.6.1-3 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 18 more
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
3.6.1-2, 3.6.1-3 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 53 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
3.6.1-2, 3.6.1-3 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 54 more