steveukx

Monday, October 5

• GitHub CVE-2026-102829
  simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

  • steveukx git-js
  • Critical
  • CVSS 9.2
  • EPSS 0.28%
  • Fixed version listed
  23:48 UTC
• GitHub CVE-2026-102828
  simple-git unsafe-operation guard does not block trailer command configuration

  • steveukx git-js
  • Critical
  • CVSS 9.2
  • EPSS 0.38%
  • Fixed version listed
  23:48 UTC