Remote code execution in simple-git

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-25860 · ADVISORY
• steveukx/git-js#881 · WEB
• steveukx/git-js commit ec97a39 · WEB
• security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3177391 · WEB

Mais vulnerabilidades de simple-git

• CVE-2026-102828CRÍTICO 9.8simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript…
• CVE-2026-102827CRÍTICO 9.8simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript…
• CVE-2026-102826ALTO 8.1simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript…
• CVE-2026-6951CRÍTICO 9.8Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912]…
• CVE-2026-28291ALTO 8.1simple-git enables running native Git commands from JavaScript. Versions up to and including 3.31.1 allow execution of arbitrary commands th…