CVE-2020-27955
1 advisory.
Go/github.com/git-lfs/git-lfs CVE-2020-27955: critical 9.8
Git LFS can execute a Git binary from the current directory
Action: Upgrade github.com/git-lfs/git-lfs to 2.12.1 or later.
go get github.com/git-lfs/git-lfs@v2.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.12.1 | - |
Fixed versions
| 2.12.1 |
Sources
- osv: GHSA-4g4p-42wc-9f3m
- https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m
- https://nvd.nist.gov/vuln/detail/CVE-2020-27955
- https://github.com/git-lfs/git-lfs
- https://github.com/git-lfs/git-lfs/releases
- https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html
- http://seclists.org/fulldisclosure/2020/Nov/1
CVE-2020-27955 · published · modified · JSON