Security Advisory

Github Product Security Update Advisory (CVE-2024-53263)

  • Jan 31 2025

Overview

We have released security updates to fix vulnerabilities in our Github products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2024-53263

Git LFS versions: 0.1.0 ~ 3.6.0 (inclusive)

 

 

Resolved Vulnerabilities

Credential discovery allowed vulnerability (CVE-2024-53263)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
 

CVE-2024-53263

Git LFS version: 3.6.1

 

 

References

[1] Git LFS permits retrieval of credentials via crafted HTTP URLs
https://github.com/git-lfs/git-lfs/security/advisories/GHSA-q6r2-x2cc-vrp7

Tags:

Previous Post

Next Post