Skip to content
git-lfs
Products
| Product | CVEs | Exploited | Latest |
|---|
| git-lfs | 4 | – | Oct 17, 2025 |
Exploited and recent CVEs
-
CVE-2025-26625
High 8.6
Git LFS may write to arbitrary files via crafted symlinks
1.1%
-
CVE-2024-53263
High 8.5
Git LFS permits exfiltration of credentials via crafted HTTP URLs
1.1%
-
CVE-2022-24826
Critical 9.8
Git LFS can execute a binary from the current directory on Windows
2.2%
-
CVE-2021-21237
High 7.2
Git LFS can execute a Git binary from the current directory on Windows
0.5%