steveukx git-js

• CVE-2026-102829 Critical 9.2 simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection 0.4%
• CVE-2026-102828 Critical 9.2 simple-git unsafe-operation guard does not block trailer command configuration 0.4%
• CVE-2026-102827 High 8.1 simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) 0.6%
• CVE-2026-102826 High 8.1 simple-git allows command execution through unblocked Git configuration includes 0.5%
• CVE-2026-28291 High 8.1 simple-git has Command Execution via Option-Parsing Bypass 0.8%