git-js 产品相关 5 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。
厂商: steveukx
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-102829 | simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection CWE-78 | 9.2 | Critical | 2026-09-29 |
| CVE-2026-102828 | simple-git unsafe-operation guard does not block trailer command configuration CWE-78 | 9.2 | Critical | 2026-09-29 |
| CVE-2026-102827 | simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291) CWE-77 | 8.1 | High | 2026-09-29 |
| CVE-2026-102826 | simple-git allows command execution through unblocked Git configuration includes CWE-77 | 8.1 | High | 2026-09-29 |
| CVE-2026-28291 | Simple Git 操作系统命令注入漏洞 CWE-78 | 8.1 | High | 2026-04-13 |
git-js 产品累计公开 5 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。