Vulnerability Report: GO-2021-0098

  • CVE-2021-21237, GHSA-cx3w-xqmc-84g5
  • Affects: github.com/git-lfs/git-lfs
  • Published: Apr 14, 2021
  • Modified: Jun 12, 2023

Due to the standard library behavior of exec.LookPath on Windows a number of methods may result in arbitrary code execution when cloning or operating on untrusted Git repositories.

Affected Packages

Aliases

References

Credits

  • @Ry0taK

Feedback

See anything missing or incorrect? Suggest an edit to this report.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.