CVE-2026-102828
1 advisory.
npm/simple-git CVE-2026-102828: critical, EPSS 0.38%
simple-git unsafe-operation guard does not block trailer command configuration
Action: Upgrade simple-git to 4.0.1 or later.
npm i simple-git@4.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.15.0 | 4.0.1 | - |
Fixed versions
| 4.0.1 |
Sources
- osv: GHSA-x6jw-m9v5-85vh
- https://github.com/steveukx/git-js/security/advisories/GHSA-x6jw-m9v5-85vh
- https://nvd.nist.gov/vuln/detail/CVE-2026-102828
- https://github.com/steveukx/git-js/pull/1198
- https://github.com/steveukx/git-js/commit/d762810c13b331ff1e5eb24c0b434646d2a8d1b3
- https://github.com/steveukx/git-js
- https://github.com/steveukx/git-js/releases/tag/simple-git@4.0.1
CVE-2026-102828 · published · modified · JSON