Skip to content
Threat Feed
Subscribe

Product

@Simple-Git/Argv-Parser (<= 1.1.1)

1 brief RSS
high advisory

Security-Control Bypass in @simple-git/argv-parser via Unfiltered VISUAL Environment Variable

The @simple-git/argv-parser library fails to classify the VISUAL environment variable as an unsafe editor, allowing attackers to bypass security guards and execute arbitrary code during Git operations.

@simple-git/argv-parser security-bypass code-execution git supply-chain
1t