steveukx vulnerabilities

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

steveukx · git-js

simple-git unsafe-operation guard does not block trailer command configuration

steveukx · git-js

simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

steveukx · git-js

simple-git allows command execution through unblocked Git configuration includes

steveukx · git-js

simple-git has Command Execution via Option-Parsing Bypass

steveukx · git-js

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE

steveukx · simple-git