{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/53103?format=json","vulnerability_id":"VCID-9dw1-pfyv-67hq","summary":"Git LFS can execute a Git binary from the current directory\n### Impact\nOn Windows, if Git LFS operates on a malicious repository with a `git.bat` or `git.exe` file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code.  This does not affect Unix systems.\n\nThis occurs because on Windows, Go includes (and prefers) the current directory when the name of a command run does not contain a directory separator.\n\n### Patches\nThis version should be patched in v2.12.1, which will be released in coordination with this security advisory.\n\n### Workarounds\nOther than avoiding untrusted repositories, there is no workaround.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Start a discussion in [the Git LFS discussion page](https://github.com/git-lfs/git-lfs/discussions).\n* If you cannot open a discussion, please email the core team using their usernames at `github.com`.","aliases":[{"alias":"CVE-2020-27955"},{"alias":"GHSA-4g4p-42wc-9f3m"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/385900?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/385902?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/385903?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/385904?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/385905?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/385906?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/385907?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/385908?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/473482?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/473483?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/473484?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515734?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515735?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515737?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515738?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515739?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/521366?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.20&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.20&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/521367?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.20&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.20&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/521368?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.20&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.20&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/521369?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.20&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.20&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/521370?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.20&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.20&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/521371?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.20&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.20&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/521372?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.20&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.20&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/521373?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.20&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.20&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/962996?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/962997?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/962998?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/962999?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/963000?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/963001?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/978258?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/978259?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009694?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009695?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011427?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011428?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011429?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011430?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011431?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011432?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011433?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011434?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515736?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/963002?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/973595?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/978260?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009693?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/500048?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/385901?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=edge&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=edge&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/473479?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/473480?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/473481?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/473485?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/500044?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/500045?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/500046?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/500047?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/500049?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/500050?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515731?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515732?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/515733?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.23&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.23&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/973590?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/973591?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/973592?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/973593?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/973594?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/973596?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/978254?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/978255?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armhf&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armhf&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/978256?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=armv7&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=armv7&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/978257?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009696?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=loongarch64&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=loongarch64&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009697?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=ppc64le&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=ppc64le&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009698?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=riscv64&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=riscv64&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009699?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=s390x&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=s390x&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009700?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1009701?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=x86_64&distroversion=v3.22&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=x86_64&distroversion=v3.22&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1011426?format=json","purl":"pkg:apk/alpine/git-lfs@0?arch=aarch64&distroversion=v3.21&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs@0%3Farch=aarch64&distroversion=v3.21&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/404122?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/476810?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/476811?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/476812?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/476813?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/476814?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/476815?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/492762?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/492763?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1015661?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1015662?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1030469?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/476809?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.15&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.15&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1015660?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/404116?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/404117?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/404118?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/404119?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/404120?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/404121?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.18&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.18&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/492764?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/492765?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/492766?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/492767?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/492768?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.17&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.17&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1015656?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=aarch64&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=aarch64&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1015657?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1015658?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1015659?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.19&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.19&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1030470?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armhf&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armhf&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1030471?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=armv7&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=armv7&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1030472?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=ppc64le&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=ppc64le&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1030473?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=s390x&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=s390x&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1030474?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/1030475?format=json","purl":"pkg:apk/alpine/git-lfs2@0?arch=x86_64&distroversion=v3.16&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/git-lfs2@0%3Farch=x86_64&distroversion=v3.16&reponame=community"},{"url":"http://public2.vulnerablecode.io/api/packages/923242?format=json","purl":"pkg:deb/debian/git-lfs@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/923243?format=json","purl":"pkg:deb/debian/git-lfs@2.13.2-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3954-3k4u-xbhr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@2.13.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/923241?format=json","purl":"pkg:deb/debian/git-lfs@3.3.0-1%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3954-3k4u-xbhr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.3.0-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/923245?format=json","purl":"pkg:deb/debian/git-lfs@3.6.1-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3954-3k4u-xbhr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.6.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/923244?format=json","purl":"pkg:deb/debian/git-lfs@3.7.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/git-lfs@3.7.1-1%3Fdistro=trixie"}],"affected_packages":[],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-27955","reference_id":"","reference_type":"","scores":[{"value":"0.93606","scoring_system":"epss","scoring_elements":"0.99835","published_at":"2026-04-13T12:55:00Z"},{"value":"0.93606","scoring_system":"epss","scoring_elements":"0.99839","published_at":"2026-05-12T12:55:00Z"},{"value":"0.93606","scoring_system":"epss","scoring_elements":"0.99838","published_at":"2026-05-07T12:55:00Z"},{"value":"0.93606","scoring_system":"epss","scoring_elements":"0.99837","published_at":"2026-05-05T12:55:00Z"},{"value":"0.93606","scoring_system":"epss","scoring_elements":"0.99836","published_at":"2026-04-21T12:55:00Z"},{"value":"0.93606","scoring_system":"epss","scoring_elements":"0.99834","published_at":"2026-04-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-27955"},{"reference_url":"http://seclists.org/fulldisclosure/2020/Nov/1","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://seclists.org/fulldisclosure/2020/Nov/1"},{"reference_url":"https://github.com/git-lfs/git-lfs","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/git-lfs/git-lfs"},{"reference_url":"https://github.com/git-lfs/git-lfs/releases","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/git-lfs/git-lfs/releases"},{"reference_url":"https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m"},{"reference_url":"https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27955","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27955"}],"weaknesses":[{"cwe_id":427,"name":"Uncontrolled Search Path Element","description":"The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors."}],"exploits":[{"date_added":null,"description":"A critical vulnerability (CVE-2020-27955) in Git Large File Storage (Git LFS), an open source Git extension for\n          versioning large files, allows attackers to achieve remote code execution if the Windows-using victim is tricked\n          into cloning the attacker's malicious repository using a vulnerable Git version control tool","required_action":null,"due_date":null,"notes":"Stability:\n  - crash-safe\nReliability:\n  - repeatable-session\nSideEffects:\n  - artifacts-on-disk\n","known_ransomware_campaign_use":false,"source_date_published":"2020-11-04","exploit_type":null,"platform":"Windows","source_date_updated":null,"data_source":"Metasploit","source_url":"https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/http/git_lfs_rce.rb"}],"severity_range_score":"9.0 - 10.0","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9dw1-pfyv-67hq"}