GI
Product
git-js
5
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 3High 2Medium 0Low 0
Watch
Add git-js to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102828 | 9.8 | Sep 29 | simple-git unsafe-operation guard does not block trailer command configuration Affected: >= 3.15.0, < 4.0.1 |
| CVE-2026-102827 | 9.8 | Sep 29 | simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) Affected: < 4.0.0 |
| CVE-2026-102829 | 9.2 | Sep 29 | simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection Affected: < 2.0.1 |
Showing 3