Simple-git Project Simple-git vulnerabilities

• simple-git project simple-git, steveukx git-js +1 more simple-git unsafe-operation guard does not block trailer command configuration CVE-2026-102828 Fix available 9.2 CriticalSeptember 29, 2026
• simple-git project simple-git, steveukx git-js +1 more simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) CVE-2026-102827 Public exploitFix available 8.1 HighSeptember 29, 2026
• simple-git project simple-git, steveukx git-js +1 more simple-git allows command execution through unblocked Git configuration includes CVE-2026-102826 Public exploitFix available 8.1 HighSeptember 29, 2026
• simple-git project simple-git, red hat enterprise linux 8, enterprise linux 9 +3 more +5 more simple-git is vulnerable to Remote Code Execution CVE-2026-6951 Public exploitFix available 9.2 CriticalApril 25, 2026
• simple-git project simple-git, red hat build of keycloak, enterprise linux 8 +5 more +7 more simple-git has Command Execution via Option-Parsing Bypass CVE-2026-28291 Fix available 8.1 HighApril 13, 2026
• simple-git project simple-git, red hat logging subsystem for red hat openshift, enterprise linux 8 +4 more +6 more simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE CVE-2026-28292 Fix available 9.8 CriticalMarch 10, 2026
• simple-git project simple-git Remote code execution in simple-git CVE-2022-25860 Fix available 8.1 HighJanuary 24, 2023
• simple-git project simple-git Remote Code Execution (RCE) CVE-2022-25912 Fix available 8.1 HighDecember 6, 2022
• simple-git project simple-git Command Injection CVE-2022-24066 Fix available 8.1 HighApril 1, 2022
• simple-git project simple-git Command Injection CVE-2022-24433 Fix available 8.1 HighMarch 11, 2022