Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-9dw1-pfyv-67hq
Summary
Git LFS can execute a Git binary from the current directory
### Impact
On Windows, if Git LFS operates on a malicious repository with a `git.bat` or `git.exe` file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code.  This does not affect Unix systems.

This occurs because on Windows, Go includes (and prefers) the current directory when the name of a command run does not contain a directory separator.

### Patches
This version should be patched in v2.12.1, which will be released in coordination with this security advisory.

### Workarounds
Other than avoiding untrusted repositories, there is no workaround.

### For more information
If you have any questions or comments about this advisory:
* Start a discussion in [the Git LFS discussion page](https://github.com/git-lfs/git-lfs/discussions).
* If you cannot open a discussion, please email the core team using their usernames at `github.com`.
Aliases
0
alias CVE-2020-27955
1
alias GHSA-4g4p-42wc-9f3m
Fixed_packages
0
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.17&reponame=community
1
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.16&reponame=community
2
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.16&reponame=community
3
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.16&reponame=community
4
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.23&reponame=community
5
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.23&reponame=community
6
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.23&reponame=community
7
url pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.23&reponame=community
8
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.23&reponame=community
9
url pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.23&reponame=community
10
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.23&reponame=community
11
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.23&reponame=community
12
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.23&reponame=community
13
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.20&reponame=community
14
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.20&reponame=community
15
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.15&reponame=community
16
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.15&reponame=community
17
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.15&reponame=community
18
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.15&reponame=community
19
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.15&reponame=community
20
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.19&reponame=community
21
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.19&reponame=community
22
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.19&reponame=community
23
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.19&reponame=community
24
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.19&reponame=community
25
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.19&reponame=community
26
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.19&reponame=community
27
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.18&reponame=community
28
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.18&reponame=community
29
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.18&reponame=community
30
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.18&reponame=community
31
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.18&reponame=community
32
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.18&reponame=community
33
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.22&reponame=community
34
url pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.22&reponame=community
35
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.22&reponame=community
36
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.22&reponame=community
37
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.22&reponame=community
38
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.21&reponame=community
39
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.20&reponame=community
40
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=edge&reponame=community
41
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=edge&reponame=community
42
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=edge&reponame=community
43
url pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=edge&reponame=community
44
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=edge&reponame=community
45
url pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=edge&reponame=community
46
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=edge&reponame=community
47
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=edge&reponame=community
48
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=edge&reponame=community
49
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.17&reponame=community
50
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.17&reponame=community
51
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.17&reponame=community
52
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.17&reponame=community
53
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.17&reponame=community
54
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.16&reponame=community
55
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.16&reponame=community
56
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.16&reponame=community
57
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.16&reponame=community
58
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.20&reponame=community
59
url pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.20&reponame=community
60
url pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.20&reponame=community
61
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.20&reponame=community
62
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.20&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.20&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.20&reponame=community
63
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.15&reponame=community
64
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.15&reponame=community
65
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.18&reponame=community
66
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.22&reponame=community
67
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.22&reponame=community
68
url pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.22&reponame=community
69
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.22&reponame=community
70
url pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.21&reponame=community
71
url pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.21&reponame=community
72
url pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.21&reponame=community
73
url pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.21&reponame=community
74
url pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.21&reponame=community
75
url pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.21&reponame=community
76
url pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.21&reponame=community
77
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.21&reponame=community
78
url pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.17&reponame=community
79
url pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.18&reponame=community
80
url pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.18&reponame=community
81
url pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.18&reponame=community
82
url pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.18&reponame=community
83
url pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.15&reponame=community
84
url pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.15&reponame=community
85
url pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.15&reponame=community
86
url pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.15&reponame=community
87
url pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.17&reponame=community
88
url pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.17&reponame=community
89
url pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.17&reponame=community
90
url pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.17&reponame=community
91
url pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.17&reponame=community
92
url pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.17&reponame=community
93
url pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.17&reponame=community
94
url pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.19&reponame=community
95
url pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.19&reponame=community
96
url pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.19&reponame=community
97
url pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.19&reponame=community
98
url pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.19&reponame=community
99
url pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.19&reponame=community
100
url pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.19&reponame=community
101
url pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.16&reponame=community
102
url pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.16&reponame=community
103
url pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.18&reponame=community
104
url pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.18&reponame=community
105
url pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.18&reponame=community
106
url pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.15&reponame=community
107
url pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.15&reponame=community
108
url pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.15&reponame=community
109
url pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.16&reponame=community
110
url pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.16&reponame=community
111
url pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.16&reponame=community
112
url pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.16&reponame=community
113
url pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.16&reponame=community
114
url pkg:deb/debian/git-lfs@0?distro=trixie
purl pkg:deb/debian/git-lfs@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@0%3Fdistro=trixie
115
url pkg:deb/debian/git-lfs@2.13.2-1?distro=trixie
purl pkg:deb/debian/git-lfs@2.13.2-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3954-3k4u-xbhr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@2.13.2-1%3Fdistro=trixie
116
url pkg:deb/debian/git-lfs@3.3.0-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/git-lfs@3.3.0-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3954-3k4u-xbhr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.3.0-1%252Bdeb12u1%3Fdistro=trixie
117
url pkg:deb/debian/git-lfs@3.6.1-1?distro=trixie
purl pkg:deb/debian/git-lfs@3.6.1-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3954-3k4u-xbhr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.6.1-1%3Fdistro=trixie
118
url pkg:deb/debian/git-lfs@3.7.1-1?distro=trixie
purl pkg:deb/debian/git-lfs@3.7.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.7.1-1%3Fdistro=trixie
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-27955
reference_id
reference_type
scores
0
value 0.93606
scoring_system epss
scoring_elements 0.99836
published_at 2026-04-21T12:55:00Z
1
value 0.93606
scoring_system epss
scoring_elements 0.99834
published_at 2026-04-07T12:55:00Z
2
value 0.93606
scoring_system epss
scoring_elements 0.99835
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-27955
1
reference_url http://seclists.org/fulldisclosure/2020/Nov/1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2020/Nov/1
2
reference_url https://github.com/git-lfs/git-lfs
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/git-lfs/git-lfs
3
reference_url https://github.com/git-lfs/git-lfs/releases
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/git-lfs/git-lfs/releases
4
reference_url https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m
5
reference_url https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-27955
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-27955
Weaknesses
0
cwe_id 427
name Uncontrolled Search Path Element
description The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Exploits
0
date_added null
description
A critical vulnerability (CVE-2020-27955) in Git Large File Storage (Git LFS), an open source Git extension for
          versioning large files, allows attackers to achieve remote code execution if the Windows-using victim is tricked
          into cloning the attacker's malicious repository using a vulnerable Git version control tool
required_action null
due_date null
notes
Stability:
  - crash-safe
Reliability:
  - repeatable-session
SideEffects:
  - artifacts-on-disk
known_ransomware_campaign_use false
source_date_published 2020-11-04
exploit_type null
platform Windows
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/http/git_lfs_rce.rb
Severity_range_score9.0 - 10.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-9dw1-pfyv-67hq