Remote code execution in simple-git

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-25860 · ADVISORY
• steveukx/git-js#881 · WEB
• steveukx/git-js commit ec97a39 · WEB
• security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3177391 · WEB

Lỗ hổng khác của simple-git

• CVE-2026-102828NGHIÊM TRỌNG 9.8simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript…
• CVE-2026-102827NGHIÊM TRỌNG 9.8simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript…
• CVE-2026-102826CAO 8.1simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript…
• CVE-2026-6951NGHIÊM TRỌNG 9.8Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912]…
• CVE-2026-28291CAO 8.1simple-git enables running native Git commands from JavaScript. Versions up to and including 3.31.1 allow execution of arbitrary commands th…