13393 matches found
[SECURITY] Fedora 45 Update: ocaml-patch-3.1.2-3.fc45
The patch module lets you apply your unified diffs in pure OCaml. The loosely specified diff file format is widely used for transmitting differences of line-based information. The motivating example is opam, which is able to validate updates being cryptographically signed by providing a unified...
PT-2026-106802
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.2.1 Description Insufficient validation of Git submodule URLs allows for the unauthorized reading of local repositories hosted on the server. Recommendations Update to version 2026.2.1...
CVE-2026-106219: External Control of File Name or Path
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server...
PT-2026-107186
Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently resolves the hostname when connecting. An attacker who can start a migration and control the destination's DNS can change the address between...
PT-2026-107221
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea accepted pushed Git trees containing two entries with the same name, a condition that Git's own consistency checks typically reject. This discrepancy causes Gitea's web views to resolve t...
PT-2026-107218
Gitea validated a push mirror's remote address against the migrations allow and block lists only when the mirror was created. Each synchronization passed the stored address directly to git push, so a name that later resolved to a blocked or internal address was still reached. A user with...
Linux Distros Unpatched Vulnerability : CVE-2026-102828
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until...
GHSA-V5RQ-49VH-5V5C simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
Security control bypass in @simple-git/argv-parser: Git's VISUAL editor fallback is not classified as allowUnsafeEditor Report metadata | Field | Value | | --- | --- | | Package | @simple-git/argv-parser npm, pkg:npm/%40simple-git/argv-parser | | Repository | https://github.com/steveukx/git-js | ...
EUVD-2026-89336
simple-git: VISUAL editor environment variable is omitted from unsafe editor detection...
simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
Security control bypass in @simple-git/argv-parser: Git's VISUAL editor fallback is not classified as allowUnsafeEditor Report metadata | Field | Value | | --- | --- | | Package | @simple-git/argv-parser npm, pkg:npm/%40simple-git/argv-parser | | Repository | https://github.com/steveukx/git-js | ...
2context (>=0.1.0, <=0.2.0), 2ndopinion-cli (>=0.1.0, <=0.12.0) +8834 more potentially affected by CVE-2026-102828 via simple-git (>=3.15.0, <=3.36.0)
simple-git NPM version =3.15.0, =0.1.0, =0.1.0, =0.16.0, =0.0.112-rc1, =1.0.0-beta.1, =1.0.0, =0.0.2, =1.0.0, =1.0.0, =1.25.0, =2.0.0, =1.0.3, =1.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2026-102828 Source advisory: OSV:GHSA-X6JW-M9V5-85VH...
NPM: simple-git unsafe-operation guard does not block trailer command configuration
NPM: simple-git unsafe-operation guard does not block trailer command configuration vulnerability discovered by ? in WordPress Npm simple-git versions = 3.15.0, 4.0.1...
EUVD-2026-89334
simple-git unsafe-operation guard does not block trailer command configuration...
simple-git unsafe-operation guard does not block trailer command configuration
Affected product The default blockUnsafeOperationsPlugin in simple-git when an application permits untrusted values to reach SimpleGitOptions.config or Git inline configuration arguments such as -c =. Summary trailer..cmd is not recognized as unsafe by the default guard. Therefore, a configured...
GHSA-X6JW-M9V5-85VH simple-git unsafe-operation guard does not block trailer command configuration
Affected product The default blockUnsafeOperationsPlugin in simple-git when an application permits untrusted values to reach SimpleGitOptions.config or Git inline configuration arguments such as -c =. Summary trailer..cmd is not recognized as unsafe by the default guard. Therefore, a configured...
EUVD-2026-89332
simple-git allows command execution through unblocked Git configuration includes...
simple-git allows command execution through unblocked Git configuration includes
Summary An OS command injection vulnerability in git.clone allows any application that flows attacker-influenced data into customArgs to execute arbitrary code. simple-git 3.36.0 current latest on npm ships without any include.path entry in the blockUnsafeOperationsPlugin denylist. Passing -c...
NPM: simple-git allows command execution through unblocked Git configuration includes
NPM: simple-git allows command execution through unblocked Git configuration includes vulnerability discovered by ? in WordPress Npm simple-git versions = 3.36.0...
GHSA-G4WM-2VF7-VFGR simple-git allows command execution through unblocked Git configuration includes
Summary An OS command injection vulnerability in git.clone allows any application that flows attacker-influenced data into customArgs to execute arbitrary code. simple-git 3.36.0 current latest on npm ships without any include.path entry in the blockUnsafeOperationsPlugin denylist. Passing -c...