https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:12:16 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-01368 cnvd-2018-01368 https://cve.radiocsirt.org/vuln/cnvd-2018-01368 https://cve.radiocsirt.org/vuln/euvd-2026-79816 EUVD-2026-79816 https://cve.radiocsirt.org/vuln/euvd-2026-79816 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17831 <p>GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a &#34;url =&#34; line in a .lfsconfig file within a repository.</p> <p>GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a &#34;url =&#34; line in a .lfsconfig file within a repository.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-17831 https://cve.radiocsirt.org/vuln/ghsa-w4xh-w33p-4v29 <p><strong>Affected:</strong> Go: github.com/git-lfs/git-lfs</p> <p>GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a `url =` line in a `.lfsconfig` file within a repository. ### Specific Go Packages Affected github.com/git-lfs/git-lfs/lfsapi</p> <p><strong>Affected:</strong> Go: github.com/git-lfs/git-lfs</p> <p>GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a `url =` line in a `.lfsconfig` file within a repository. ### Specific Go Packages Affected github.com/git-lfs/git-lfs/lfsapi</p> https://cve.radiocsirt.org/vuln/ghsa-w4xh-w33p-4v29 https://cve.radiocsirt.org/vuln/gsd-2017-17831 gsd-2017-17831 https://cve.radiocsirt.org/vuln/gsd-2017-17831 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17831 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: git-lfs</p> <p>GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a &#34;url =&#34; line in a .lfsconfig file within a repository.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: git-lfs</p> <p>GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a &#34;url =&#34; line in a .lfsconfig file within a repository.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-17831