simple-git
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 10 advisory(ies) without a verdict
Advisories (10)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-28xr-mwxg-3qc8 Command injection in simple-git | < 3.5.0 | Undetermined |
| GHSA-3f95-r44v-8mrg Command injection in simple-git | < 3.3.0 | Undetermined |
| GHSA-858h-whjf-mvg5 simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) | < 4.0.0 | Undetermined |
| GHSA-9p95-fxvg-qgq2 simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol | < 3.15.0 | Undetermined |
| GHSA-9w5j-4mwv-2wj8 Remote code execution in simple-git | < 3.16.0 | Undetermined |
| GHSA-g4wm-2vf7-vfgr simple-git allows command execution through unblocked Git configuration includes | < 4.0.0 | Undetermined |
| GHSA-hffm-xvc3-vprc simple-git is vulnerable to Remote Code Execution | < 3.36.0 | Undetermined |
| GHSA-jcxm-m3jx-f287 simple-git Affected by Command Execution via Option-Parsing Bypass | < 3.32.0 | Undetermined |
| GHSA-r275-fr43-pm7q simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE | 3.15.0 – < 3.32.3 | Undetermined |
| GHSA-x6jw-m9v5-85vh simple-git unsafe-operation guard does not block trailer command configuration | 3.15.0 – < 4.0.1 | Undetermined |
Sources
| Source | Licence |
|---|