https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:01:55.403007+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-36038 cnvd-2022-36038 2026-10-03T18:01:55.469109+00:00 cnvd-2022-36038 https://cve.radiocsirt.org/vuln/euvd-2026-173162 EUVD-2026-173162 2026-10-03T18:01:55.469145+00:00 EUVD-2026-173162 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24066 fkie_cve-2022-24066 2026-10-03T18:01:55.469160+00:00

The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2421199) which only patches against the git fetch attack vector. A similar use of the --upload-pack feature of git is also supported for git clone, which the prior fix didn't cover.

 https://cve.radiocsirt.org/vuln/ghsa-28xr-mwxg-3qc8 GHSA-28xr-mwxg-3qc8 — Command injection in simple-git 2026-10-03T18:01:55.469191+00:00

Affected: npm: simple-git

`simple-git` (maintained as [git-js](https://github.com/steveukx/git-js) named repository on GitHub) is a light weight interface for running git commands in any node.js application.The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2421199) which only patches against the git fetch attack vector. A similar use of the --upload-pack feature of git is also supported for git clone, which the prior fix didn't cover. A fix was released in simple-git@3.5.0.

 https://cve.radiocsirt.org/vuln/gsd-2022-24066 gsd-2022-24066 2026-10-03T18:01:55.469218+00:00 gsd-2022-24066