Skip to content
Steveukx vulnerabilities
Newest
-
steveukx git-js
simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
CVE-2026-102829
Fix available
9.2 Critical
-
simple-git project simple-git, steveukx git-js +1 more
simple-git unsafe-operation guard does not block trailer command configuration
CVE-2026-102828
Fix available
9.2 Critical
-
simple-git project simple-git, steveukx git-js +1 more
simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
CVE-2026-102827
Public exploitFix available
8.1 High
-
simple-git project simple-git, steveukx git-js +1 more
simple-git allows command execution through unblocked Git configuration includes
CVE-2026-102826
Public exploitFix available
8.1 High
-
simple-git project simple-git, red hat build of keycloak, enterprise linux 8 +5 more +7 more
simple-git has Command Execution via Option-Parsing Bypass
CVE-2026-28291
Fix available
8.1 High
-
simple-git project simple-git, red hat logging subsystem for red hat openshift, enterprise linux 8 +4 more +6 more
simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE
CVE-2026-28292
Fix available
9.8 Critical