Start for Free
npm

simple-git

View on npm registry
7 Total advisories
7 Vulnerabilities
0 Malware

Dependency scanning

Check whether simple-git is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

CRITICAL 9.8
npm

CVE-2026-6951

simple-git is vulnerable to Remote Code Execution
HIGH 8.1
npm

CVE-2026-28291

simple-git Affected by Command Execution via Option-Parsing Bypass
CRITICAL 9.8
npm

CVE-2026-28292

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE
CRITICAL 9.8
npm

CVE-2022-25860

Remote code execution in simple-git
HIGH 8.1
npm

CVE-2022-24066

Command injection in simple-git
HIGH 8.1
npm

CVE-2022-24433

Command injection in simple-git
HIGH 8.1
npm

CVE-2022-25912

simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes