What’s Vulnerable › Products

simple-git vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your simple-git version is affected

Latest simple-git vulnerabilities

• CVE-2026-102829 — simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection (CVSS 9.2)
• CVE-2026-102828 — simple-git unsafe-operation guard does not block trailer command configuration (CVSS 9.8)
• CVE-2026-102827 — simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) (CVSS 9.8)
• CVE-2026-102826 — simple-git allows command execution through unblocked Git configuration includes (CVSS 8.1)
• CVE-2026-6951 — (CVSS 9.8)
• CVE-2026-28291 — simple-git has Command Execution via Option-Parsing Bypass (CVSS 8.1)
• CVE-2026-28292 — simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE (CVSS 9.8)
• CVE-2022-25860 — (CVSS 9.8)
• CVE-2022-25912 — Remote Code Execution (RCE) (CVSS 9.8)
• CVE-2022-24066 — Command Injection (CVSS 9.8)
• CVE-2022-24433 — Command Injection (CVSS 9.8)