simple-git

Trends

1
Critical CVE-2026-102829 flaw reported in simple-git●🚨 CVE-2026-102829 — CVSS 9.2 CRITICAL simple-git, an interface for running git commands in any node.js application, enabMmastodon Technology Cybersecurity015 h ago
A critical vulnerability, CVE-2026-102829 with a CVSS score of 9.2, has been disclosed in simple-git, the widely used Node.js package for running Git commands from JavaScript. The flaw stems from the argv-parser package, where versions before 2.0.1 omit VISUAL from the GitEnvKeys in parseEnv, affecting how prepareEnv handles the environment. Developers are being urged to check their dependencies and update.
2
Critical vulnerability CVE-2026-102828 found in simple-git library●🚨 CVE-2026-102828 — CVSS 9.2 CRITICAL simple-git, an interface for running git commands in any node.js application, enabMmastodon Technology Cybersecurity015 h ago
A critical vulnerability, CVE-2026-102828 with a CVSS score of 9.2, has been disclosed in simple-git, a widely used Node.js library for running Git commands from JavaScript. Versions 3.15.0 through 4.0.1 are affected because the default blockUnsafeOperationsPlugin fails to classify certain trailer .cmd values, potentially allowing unsafe Git operations. Developers are being urged to check their dependency versions and update promptly.