Known vulnerabilities in git-lfs

Vendor: SUSE
Software: git-lfs
Software CPE: cpe:2.3:o:suse:git-lfs:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting git-lfs git-lfs is affected by 6 known vulnerabilities: 4 high, 2 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118253 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-26625		 CWE-59 High
No
No
 3.7.1-150600.13.6.1 11.11.2025 SB2025111128
SB2025111129
SB2025111130
and 20 more
#VU112646 - Product UI does not Warn User of Unsafe Actions
CVE-2025-46835		 CWE-356 Medium
No
No
 3.7.0-150600.13.3.1 09.07.2025 SB2025070994
SB20250709121
SB2025071019
and 22 more
#VU112643 - Improper input validation
CVE-2025-27614		 CWE-20 High
No
No
 3.7.0-150600.13.3.1 09.07.2025 SB2025070994
SB20250709119
SB2025071019
and 18 more
#VU112642 - Protection Mechanism Failure
CVE-2025-27613		 CWE-693 High
No
No
 3.7.0-150600.13.3.1 09.07.2025 SB2025070994
SB20250709122
SB2025071019
and 22 more
#VU112638 - Improper input validation
CVE-2025-48385		 CWE-20 High
No
No
 3.7.0-150600.13.3.1 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 38 more
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-48384		 CWE-93 Medium
Available
Exploited
 3.7.0-150600.13.3.1 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 52 more