CyberSecBulletin

Org.webjars.npm:simple-git vulnerabilities

We track 1 vulnerability in Org.webjars.npm:simple-git products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 25, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Org.webjars.npm:simple-git vulnerabilities

  • 9.8 Critical severity

    simple-git: Improper Control of Generation of Code

    CVE-2026-6951Simple-git

    Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221) that blocks the -c option but not the equivalent --config form