Post
STACKFLAG
stackflag.bsky.social
did:plc:zhe53h7ajlloep2oso5pqxzj
CVE-2026-102828 - git-js
The simple-git library does not block a special Git setting called trailer.<token>.cmd, which can run shell commands. If an application passes untrusted data into simple-git’s…
Too many irrelevant or confusing CVEs? Use stackflag.com
#gitjs #steveukx #npm #CVE #infosec
https://stackflag.com/vulnerabilities/cve-2026-102828-git-js?utm_source=bluesky&utm_medium=social&utm_campaign=cve_poster&utm_content=cve-2026-102828
2026-10-07T08:50:04.977Z