Mmastodon TechnologyCybersecurity first seen 7 h ago, last 7 h ago, peak #8

Critical vulnerability CVE-2026-102828 found in simple-git library

Original: 🚨 CVE-2026-102828 — CVSS 9.2 CRITICAL simple-git, an interface for running git commands in any node.js application, enab

A critical vulnerability, CVE-2026-102828 with a CVSS score of 9.2, has been disclosed in simple-git, a widely used Node.js library for running Git commands from JavaScript. Versions 3.15.0 through 4.0.1 are affected because the default blockUnsafeOperationsPlugin fails to classify certain trailer .cmd values, potentially allowing unsafe Git operations. Developers are being urged to check their dependency versions and update promptly.

Why now: Developers are alarmed that a widely used, critical-rated flaw could expose Node.js applications to attacks via Git operations.

simple-gitNode.jsGit

Open on mastodon →

Evidence

• 🚨 CVE-2026-102828 — CVSS 9.2 CRITICAL simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer. .cmd… · stemshop

API: https://socialmediatrends-api.osmike.com/v1/trends/399354