Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-r275-fr43-pm7q
  • npm/simple-git
 simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE 10 Mar
  • Fix available
  • Severity - 9.8 (Critical)
CLEANSTART-2026-FN02943
  • CleanStart/renovate
 Security fix for ghsa-r275-fr43-pm7q applied in: renovate 43.4.3-r1, renovate 43.4.4-r0 18 Sep
  • Fix available
CGA-p3ch-pvj3-hhrm
  • Chainguard/gemini-cli
 See record for full details 26 Jun
  • Fix available
  • Severity - 9.8 (Critical)
CGA-62j7-w348-jj8x
  • Chainguard/gemini-cli
 See record for full details 26 Jun
  • Fix available
  • Severity - 9.8 (Critical)
CGA-xhg2-cx94-65f6
  • Chainguard/gemini-cli
 See record for full details 25 Jun
  • Fix available
  • Severity - 9.8 (Critical)
CGA-m8gg-m9qp-6cv2
  • Chainguard/gemini-cli
 See record for full details 25 Jun
  • Fix available
  • Severity - 9.8 (Critical)
MINI-prqw-qwhg-g9p5
  • MinimOS/openclaw
 See record for full details 13 Mar
  • Fix available
CVE-2026-28292
  • github.com/steveukx/git-js
 simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE 10 Mar
  • Fix available
  • Severity - 9.8 (Critical)