Skip to content

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE

Critical severity GitHub Reviewed Published Apr 12, 2026 in steveukx/git-js • Updated Apr 14, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts