https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:27:54 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-36038 cnvd-2022-36038 https://cve.radiocsirt.org/vuln/cnvd-2022-36038 https://cve.radiocsirt.org/vuln/euvd-2026-173162 EUVD-2026-173162 https://cve.radiocsirt.org/vuln/euvd-2026-173162 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24066 <p>The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2421199) which only patches against the git fetch attack vector. A similar use of the --upload-pack feature of git is also supported for git clone, which the prior fix didn&#39;t cover.</p> <p>The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2421199) which only patches against the git fetch attack vector. A similar use of the --upload-pack feature of git is also supported for git clone, which the prior fix didn&#39;t cover.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-24066 https://cve.radiocsirt.org/vuln/ghsa-28xr-mwxg-3qc8 <p><strong>Affected:</strong> npm: simple-git</p> <p>`simple-git` (maintained as [git-js](https://github.com/steveukx/git-js) named repository on GitHub) is a light weight interface for running git commands in any node.js application.The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2421199) which only patches against the git fetch attack vector. A similar use of the --upload-pack feature of git is also supported for git clone, which the prior fix didn&#39;t cover. A fix was released in simple-git@3.5.0.</p> <p><strong>Affected:</strong> npm: simple-git</p> <p>`simple-git` (maintained as [git-js](https://github.com/steveukx/git-js) named repository on GitHub) is a light weight interface for running git commands in any node.js application.The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2421199) which only patches against the git fetch attack vector. A similar use of the --upload-pack feature of git is also supported for git clone, which the prior fix didn&#39;t cover. A fix was released in simple-git@3.5.0.</p> https://cve.radiocsirt.org/vuln/ghsa-28xr-mwxg-3qc8 https://cve.radiocsirt.org/vuln/gsd-2022-24066 gsd-2022-24066 https://cve.radiocsirt.org/vuln/gsd-2022-24066