Steveukx / Git-JS
5 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-102829 | simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection | CRITICAL | 9.2 | Sep 29, 2026 |
| CVE-2026-102828 | simple-git unsafe-operation guard does not block trailer command configuration | CRITICAL | 9.2 | Sep 29, 2026 |
| CVE-2026-102827 | simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) | HIGH | 8.1 | Sep 29, 2026 |
| CVE-2026-102826 | simple-git allows command execution through unblocked Git configuration includes | HIGH | 8.1 | Sep 29, 2026 |
| CVE-2026-28291 | simple-git has Command Execution via Option-Parsing Bypass | HIGH | 8.1 | Apr 13, 2026 |
Showing 1 to 5 of 5 CVEs