steveukx

Products

ProductCVEsExploitedLatest
git-js5–Sep 29, 2026
simple-git1–Mar 10, 2026

Exploited and recent CVEs

  • CVE-2026-102829 Critical 9.2 simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection 0.4%
  • CVE-2026-102828 Critical 9.2 simple-git unsafe-operation guard does not block trailer command configuration 0.4%
  • CVE-2026-102827 High 8.1 simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) 0.6%
  • CVE-2026-102826 High 8.1 simple-git allows command execution through unblocked Git configuration includes 0.5%
  • CVE-2026-28291 High 8.1 simple-git has Command Execution via Option-Parsing Bypass 0.8%
  • CVE-2026-28292 Critical 9.8 simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE 1.4%