Simple Git
1 CVEs
product
Monthly
simple-git Node.js library has a command injection vulnerability (EPSS with patch) enabling RCE when processing untrusted git operations.
Node.js
RCE
Simple Git
Redhat
Suse
NVD
GitHub
VulDB
CVSS 3.1
9.8
EPSS
0.1%
CVE-2026-28292
EPSS 0%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
simple-git Node.js library has a command injection vulnerability (EPSS with patch) enabling RCE when processing untrusted git operations.
Node.js
RCE
Simple Git
+2
NVD
GitHub
VulDB