ST
Vendor
steveukx
6
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102829 | GI git-js steveukx | 9.2 | Sep 29 | simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection |
| CVE-2026-102828 | GI git-js steveukx | 9.8 | Sep 29 | simple-git unsafe-operation guard does not block trailer command configuration |
| CVE-2026-102827 | GI git-js steveukx | 9.8 | Sep 29 | simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) |
| CVE-2026-102826 | GI git-js steveukx | 8.1 | Sep 29 | simple-git allows command execution through unblocked Git configuration includes |
| CVE-2026-28291 | GI git-js steveukx | 8.1 | Apr 13 | simple-git has Command Execution via Option-Parsing Bypass |
| CVE-2026-28292 | SI simple-git steveukx | 9.8 | Mar 10 | simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE |
