Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:simple-Git_project:simple-Git:*:*:*:*:*:*:*:*

1 brief RSS
critical threat

Remote Code Execution in simple-git via --config Injection

CVE-2026-6951 is a remote code execution vulnerability in the simple-git library, resulting from a filter bypass that allows command injection through the --config option and the Git ext protocol.

exploited simple-git
1t 2c