@stackflag.bsky.socialCVE-2022-25860 - simple-git
The simple-git library used in several projects could let an attacker run their own code on your system. This risk has been fixed in newer releases, and the updates…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102829 - git-js
The @simple‑git/argv-parser library used by simple‑git does not treat the VISUAL environment variable as a risky editor setting. Because VISUAL is dropped before safety checks,…
Too many irrelevant or confusing CVEs? Use stackflag.com