Skip to content

Vulnerable version of git LFS bundled in latest release #2293

New issue
New issue
Closed
Closed
Vulnerable version of git LFS bundled in latest release#2293
Milestone
2.50
@JamesHallowell

Description

@JamesHallowell
JamesHallowell
opened on Feb 5, 2025

The git instance bundled with Fork 2.49.1 includes a vulnerable version of git LFS (v3.4.0). The vulnerability is in all versions of git LFS prior to v3.6.1. See GHSA-q6r2-x2cc-vrp7.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions