Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/53103?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53103?format=api", "vulnerability_id": "VCID-9dw1-pfyv-67hq", "summary": "Git LFS can execute a Git binary from the current directory\n### Impact\nOn Windows, if Git LFS operates on a malicious repository with a `git.bat` or `git.exe` file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems.\n\nThis occurs because on Windows, Go includes (and prefers) the current directory when the name of a command run does not contain a directory separator.\n\n### Patches\nThis version should be patched in v2.12.1, which will be released in coordination with this security advisory.\n\n### Workarounds\nOther than avoiding untrusted repositories, there is no workaround.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Start a discussion in [the Git LFS discussion page](https://github.com/git-lfs/git-lfs/discussions).\n* If you cannot open a discussion, please email the core team using their usernames at `github.com`.", "aliases": [ { "alias": "CVE-2020-27955" }, { "alias": "GHSA-4g4p-42wc-9f3m" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/385900?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/385903?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/385907?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/473479?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/473480?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/473481?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/473485?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500050?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515732?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/521370?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/973594?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009697?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009701?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011428?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500044?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500045?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500046?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515731?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515733?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515734?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515735?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515736?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515737?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515738?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/515739?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.23&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.23&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/521366?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/521368?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/962999?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/963000?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/963001?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/963002?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/973592?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/973595?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/978255?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/978256?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/978257?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/978260?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009693?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009700?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/385901?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/385902?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/385904?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/385905?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/385906?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/385908?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=edge&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=edge&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/521371?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/521373?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/973596?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/978254?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/978258?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009698?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009699?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011427?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011429?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011430?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/962996?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/973590?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/973591?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/973593?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011432?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/521367?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/473482?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/473483?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/473484?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500047?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500048?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/500049?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/521369?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/521372?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.20&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.20&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/962997?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/962998?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/978259?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009694?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011426?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011433?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011431?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1011434?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.21&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.21&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009695?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1009696?format=api", "purl": "pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.22&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/404118?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/404119?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1030475?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/404120?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/404121?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/476809?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/476815?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/492762?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/492765?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/492766?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/492767?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/492768?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1015656?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1015658?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1015659?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1015660?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1015662?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/404117?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/476810?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/476814?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1015661?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1030469?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1030470?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1030473?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1030474?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/404116?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/404122?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.18&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.18&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/476811?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/476812?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/476813?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.15&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.15&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1030471?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/492763?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/492764?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.17&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.17&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1015657?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.19&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/1030472?format=api", "purl": "pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.16&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.16&reponame=community" }, { "url": "http://public2.vulnerablecode.io/api/packages/923242?format=api", "purl": "pkg:deb/debian/git-lfs@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/923243?format=api", "purl": "pkg:deb/debian/git-lfs@2.13.2-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3954-3k4u-xbhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@2.13.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/923241?format=api", "purl": "pkg:deb/debian/git-lfs@3.3.0-1%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3954-3k4u-xbhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.3.0-1%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/923245?format=api", "purl": "pkg:deb/debian/git-lfs@3.6.1-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3954-3k4u-xbhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.6.1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/923244?format=api", "purl": "pkg:deb/debian/git-lfs@3.7.1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.7.1-1%3Fdistro=trixie" } ], "affected_packages": [], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-27955", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.93606", "scoring_system": "epss", "scoring_elements": "0.99835", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.93606", "scoring_system": "epss", "scoring_elements": "0.99839", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.93606", "scoring_system": "epss", "scoring_elements": "0.99838", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.93606", "scoring_system": "epss", "scoring_elements": "0.99837", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.93606", "scoring_system": "epss", "scoring_elements": "0.99836", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.93606", "scoring_system": "epss", "scoring_elements": "0.99834", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-27955" }, { "reference_url": "http://seclists.org/fulldisclosure/2020/Nov/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/fulldisclosure/2020/Nov/1" }, { "reference_url": "https://github.com/git-lfs/git-lfs", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/git-lfs/git-lfs" }, { "reference_url": "https://github.com/git-lfs/git-lfs/releases", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/git-lfs/git-lfs/releases" }, { "reference_url": "https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m" }, { "reference_url": "https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27955", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27955" } ], "weaknesses": [ { "cwe_id": 427, "name": "Uncontrolled Search Path Element", "description": "The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors." } ], "exploits": [ { "date_added": null, "description": "A critical vulnerability (CVE-2020-27955) in Git Large File Storage (Git LFS), an open source Git extension for\n versioning large files, allows attackers to achieve remote code execution if the Windows-using victim is tricked\n into cloning the attacker's malicious repository using a vulnerable Git version control tool", "required_action": null, "due_date": null, "notes": "Stability:\n - crash-safe\nReliability:\n - repeatable-session\nSideEffects:\n - artifacts-on-disk\n", "known_ransomware_campaign_use": false, "source_date_published": "2020-11-04", "exploit_type": null, "platform": "Windows", "source_date_updated": null, "data_source": "Metasploit", "source_url": "https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/http/git_lfs_rce.rb" } ], "severity_range_score": "9.0 - 10.0", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9dw1-pfyv-67hq" }