6 CVEs
git-lfs Vulnerabilities
CVE security advisories and vulnerability history for git-lfs.
6
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
1
Public exploits
With known exploit
8.5
Avg CVSS
2017–2025
Overview
git-lfs has 6 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting git-lfs products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
Severity and exploitation
How the CVSS severity of git-lfs's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.