How many simple-git project simple-git CVEs are in CISA KEV?

None of simple-git project simple-git's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of simple-git project simple-git are affected?

14 distinct simple-git project simple-git versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in simple-git project simple-git CVEs?

simple-git project simple-git's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical simple-git project simple-git vulnerabilities are there?

simple-git project simple-git has 5 critical and 2 high-severity CVEs.

What is the average severity of simple-git project simple-git CVEs?

The average CVSS base score across simple-git project simple-git's scored CVEs is 9.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

simple-git project

7 CVEs

simple-git project simple-git Vulnerabilities

Name: simple-git project simple-git vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for simple-git by simple-git project.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

5

Public exploits

PoC or exploit code

9.4

Avg CVSS

2022–2026

Last updated April 25, 2026

Overview

simple-git project simple-git has 7 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 9.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting simple-git project simple-git, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of simple-git project simple-git's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of simple-git project simple-git's CVEs are currently listed in CISA's KEV catalog.

Public exploits

5

5 of simple-git project simple-git's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every simple-git project simple-git version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.15.01 CVE
< 3.16.01 CVE
< 3.3.01 CVE
< 3.32.01 CVE
< 3.5.01 CVE
3.15.0 <= v < 3.32.21 CVE
3.15.0 <= v < 3.36.01 CVE

Fixed in

3.15.01 CVE
3.16.01 CVE
3.3.01 CVE
3.32.01 CVE
3.32.21 CVE
3.36.01 CVE
3.5.01 CVE

Find a version

7 CVEs

Sort

High vulnerability · 2026-04-25
CVE-2026-6951
Public exploit
Patch
CWE-88
High · CVSS 8.9
EPSS 0.9% (55th pct)2026-04-25
simple-git has Command Execution via Option-Parsing Bypass
CVE-2026-28291
Public exploit
Patch
CWE-78
High · CVSS 8.1
EPSS 0.7% (48th pct)2026-04-13
simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE
CVE-2026-28292
Public exploit
Patch
CWE-78
Critical · CVSS 9.8
EPSS 1.3% (67th pct)2026-03-10
Critical vulnerability · 2023-01-24
CVE-2022-25860
Public exploit
Patch
CWE-94
Critical · CVSS 9.8
EPSS 2.7% (84th pct)2023-01-24
Critical vulnerability · 2022-12-12
CVE-2022-25912
Public exploit
Patch
CWE-78
Critical · CVSS 9.8
EPSS 2.8% (85th pct)2022-12-12
Critical vulnerability · 2022-04-01
CVE-2022-24066
Patch
Critical · CVSS 9.8
EPSS 4.1% (90th pct)2022-04-01
Critical vulnerability · 2022-03-11
CVE-2022-24433
Patch
Critical · CVSS 9.8
EPSS 3.6% (88th pct)2022-03-11

Common weakness types

The CWE weakness categories most often found in simple-git project simple-git CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many simple-git project simple-git CVEs were published each year.

2022

3

2023

1

2026

3

Other simple-git project products

Browse vulnerabilities for other products by simple-git project.

All simple-git project vulnerabilities

Frequently asked questions

Common questions about simple-git project simple-git vulnerabilities.

How many CVEs does simple-git project simple-git have?: simple-git project simple-git has 7 published CVE records since 2022.
How many simple-git project simple-git CVEs are in CISA KEV?: None of simple-git project simple-git's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for simple-git project simple-git vulnerabilities?: Yes — 5 of simple-git project simple-git's CVEs have a known public exploit.
Which versions of simple-git project simple-git are affected?: 14 distinct simple-git project simple-git versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in simple-git project simple-git CVEs?: simple-git project simple-git's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical simple-git project simple-git vulnerabilities are there?: simple-git project simple-git has 5 critical and 2 high-severity CVEs.
What is the average severity of simple-git project simple-git CVEs?: The average CVSS base score across simple-git project simple-git's scored CVEs is 9.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track simple-git project simple-git vulnerabilities

Monitor new simple-git project simple-git vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing