- Community aggregator
- Country: United States
CVE-2026-6951 — Bypassing simple-git's Blocklist via the --config Flag (RCE Analysis)
Field Value CVE ID CVE-2026-6951 Affected package simple-git (npm) Affected versions < 3.36.0 Patched version 3.36.0 CWE CWE-94 (Improper Control of Generation of Code), CWE-88 (Argument Injection) CVSS 3.1 9.8 (Critical) — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Disclosed 2026-04-25 1. Overview…