Skip to content
OpenAdvisories

Product · steveukx

git-js

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-102829

    simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

    simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser package, parseEnv omits VISUAL from GitEnvKeys, so prepareEnv drops the value befor…

    steveukx git-js renovate keycloak-26.6-iamguarded-compat Wolfi npm
  • Critical 9.2
    CVE-2026-102828

    simple-git unsafe-operation guard does not block trailer command configuration

    simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer.<token>.cmd as unsafe conf…

    steveukx git-js renovate keycloak-26.6-iamguarded-compat Wolfi npm