{"action":"Upgrade github.com/git-lfs/git-lfs to 2.12.1 or later.","affected":[{"fixed":"2.12.1","introduced":"0"}],"component":"github.com/git-lfs/git-lfs","cve_ids":["CVE-2020-27955"],"ecosystem":"Go","epss":0.82323,"exploited":false,"fixed_versions":["2.12.1"],"ghsa_id":"GHSA-4g4p-42wc-9f3m","id":"tcs_01M5KEWHXDJX43QZ9NEZWS9T4M","modified_at":"2023-12-06T01:00:29.553451Z","published_at":"2022-02-11T23:39:18Z","references":["https://osv.dev/vulnerability/GHSA-4g4p-42wc-9f3m","https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m","https://nvd.nist.gov/vuln/detail/CVE-2020-27955","https://github.com/git-lfs/git-lfs","https://github.com/git-lfs/git-lfs/releases","https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html","http://seclists.org/fulldisclosure/2020/Nov/1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4g4p-42wc-9f3m","url":"https://osv.dev/vulnerability/GHSA-4g4p-42wc-9f3m"}],"summary":"Git LFS can execute a Git binary from the current directory"}