https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-24826.htmlhttps://patchthecve.com/cve/CVE-2022-24826.htmlWed, 17 Jun 2026 04:32:36 +0000CRITICAL 9.8: On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. Similarly, if the maliciohttps://patchthecve.com/cve/CVE-2021-21237.htmlhttps://patchthecve.com/cve/CVE-2021-21237.htmlWed, 17 Jun 2026 03:35:06 +0000HIGH 7.2: Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systehttps://patchthecve.com/cve/CVE-2020-27955.htmlhttps://patchthecve.com/cve/CVE-2020-27955.htmlWed, 17 Jun 2026 03:09:56 +0000CRITICAL 9.8: Git LFS 2.12.0 allows Remote Code Execution.