CVE-2022-25860
1 advisory.
npm/simple-git CVE-2022-25860: critical 9.8
Remote code execution in simple-git
Action: Upgrade simple-git to 3.16.0 or later.
npm i simple-git@3.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.16.0 | - |
Fixed versions
| 3.16.0 |
Sources
- osv: GHSA-9w5j-4mwv-2wj8
- https://nvd.nist.gov/vuln/detail/CVE-2022-25860
- https://github.com/steveukx/git-js/pull/881/commits/95459310e5b8f96e20bb77ef1a6559036b779e13
- https://github.com/steveukx/git-js/commit/ec97a39ab60b89e870c5170121cd9c1603cc1951
- https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3177391
CVE-2022-25860 · published · modified · JSON