steveukx git-js vulnerabilities

Newest CVEs

• CVE-2026-102829

  simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

  steveukx · git-js

  Critical9.2
• CVE-2026-102828

  simple-git unsafe-operation guard does not block trailer command configuration

  steveukx · git-js

  Critical9.2
• CVE-2026-102827

  simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

  steveukx · git-js

  High8.1
• CVE-2026-102826

  simple-git allows command execution through unblocked Git configuration includes

  steveukx · git-js

  High8.1
• CVE-2026-28291

  simple-git has Command Execution via Option-Parsing Bypass

  steveukx · git-js

  High8.1