CVE-2026-102828 - git-js
The simple-git library does not block a special Git setting called trailer..cmd, which can run shell commands. If an application passes untrusted data into simple-git’s…
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #steveukx #npm #CVE #infosec
The simple-git library does not block a special Git setting called trailer.
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #steveukx #npm #CVE #infosec
CVE-2026-102828: simple-git allows unsafe trailer command configuration
The simple-git library does not block a special Git setting called trailer..cmd, which can run shell commands.
stackflag.com
October 7, 2026 at 8:50 AM
CVE-2026-102828 - git-js
The simple-git library does not block a special Git setting called trailer..cmd, which can run shell commands. If an application passes untrusted data into simple-git’s…
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #steveukx #npm #CVE #infosec
The simple-git library does not block a special Git setting called trailer.
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #steveukx #npm #CVE #infosec
CVE-2026-102829 - git-js
The @simple‑git/argv-parser library used by simple‑git does not treat the VISUAL environment variable as a risky editor setting. Because VISUAL is dropped before safety checks,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #simplegit #npm #CVE #infosec
The @simple‑git/argv-parser library used by simple‑git does not treat the VISUAL environment variable as a risky editor setting. Because VISUAL is dropped before safety checks,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #simplegit #npm #CVE #infosec
CVE-2026-102829: simple-git argv-parser ignores VISUAL editor safety
The @simple‑git/argv-parser library used by simple‑git does not treat the VISUAL environment variable as a risky editor setting.
stackflag.com
October 7, 2026 at 9:00 AM
CVE-2026-102829 - git-js
The @simple‑git/argv-parser library used by simple‑git does not treat the VISUAL environment variable as a risky editor setting. Because VISUAL is dropped before safety checks,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #simplegit #npm #CVE #infosec
The @simple‑git/argv-parser library used by simple‑git does not treat the VISUAL environment variable as a risky editor setting. Because VISUAL is dropped before safety checks,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #simplegit #npm #CVE #infosec