https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:30:08 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-70945 cnvd-2020-70945 https://cve.radiocsirt.org/vuln/cnvd-2020-70945 https://cve.radiocsirt.org/vuln/euvd-2026-46826 EUVD-2026-46826 https://cve.radiocsirt.org/vuln/euvd-2026-46826 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27955 <p>Git LFS 2.12.0 allows Remote Code Execution.</p> <p>Git LFS 2.12.0 allows Remote Code Execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-27955 https://cve.radiocsirt.org/vuln/ghsa-4g4p-42wc-9f3m <p><strong>Affected:</strong> Go: github.com/git-lfs/git-lfs</p> <p>### Impact On Windows, if Git LFS operates on a malicious repository with a `git.bat` or `git.exe` file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems.</p> <p>This occurs because on Windows, Go includes (and prefers) the current directory when the name of a command run does not contain a directory separator.</p> <p>### Patches This version should be patched in v2.12.1, which will be released in coordination with this security advisory.</p> <p>### Workarounds Other than avoiding untrusted repositories, there is no workaround.</p> <p>### For more information If you have any questions or comments about this advisory: * Start a discussion in [the Git LFS discussion page](https://github.com/git-lfs/git-lfs/discussions). * If you cannot open a discussion, please email the core team using their usernames at `github.com`.</p> <p><strong>Affected:</strong> Go: github.com/git-lfs/git-lfs</p> <p>### Impact On Windows, if Git LFS operates on a malicious repository with a `git.bat` or `git.exe` file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems.</p> <p>This occurs because on Windows, Go includes (and prefers) the current directory when the name of a command run does not contain a directory separator.</p> <p>### Patches This version should be patched in v2.12.1, which will be released in coordination with this security advisory.</p> <p>### Workarounds Other than avoiding untrusted repositories, there is no workaround.</p> <p>### For more information If you have any questions or comments about this advisory: * Start a discussion in [the Git LFS discussion page](https://github.com/git-lfs/git-lfs/discussions). * If you cannot open a discussion, please email the core team using their usernames at `github.com`.</p> https://cve.radiocsirt.org/vuln/ghsa-4g4p-42wc-9f3m https://cve.radiocsirt.org/vuln/gsd-2020-27955 gsd-2020-27955 https://cve.radiocsirt.org/vuln/gsd-2020-27955 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1197 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in git ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in git ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1197