Steveukx Git-js vulnerabilities

• steveukx git-js simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection CVE-2026-102829 Fix available 9.2 CriticalSeptember 29, 2026
• simple-git project simple-git, steveukx git-js +1 more simple-git unsafe-operation guard does not block trailer command configuration CVE-2026-102828 Fix available 9.2 CriticalSeptember 29, 2026
• simple-git project simple-git, steveukx git-js +1 more simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) CVE-2026-102827 Public exploitFix available 8.1 HighSeptember 29, 2026
• simple-git project simple-git, steveukx git-js +1 more simple-git allows command execution through unblocked Git configuration includes CVE-2026-102826 Public exploitFix available 8.1 HighSeptember 29, 2026
• simple-git project simple-git, red hat build of keycloak, enterprise linux 8 +5 more +7 more simple-git has Command Execution via Option-Parsing Bypass CVE-2026-28291 Fix available 8.1 HighApril 13, 2026