Skip to content
Threat Feed
Subscribe

Product

Simple-Git (< 3.36.0)

1 brief RSS
critical threat

Remote Code Execution in simple-git via --config Injection

CVE-2026-6951 is a remote code execution vulnerability in the simple-git library, resulting from a filter bypass that allows command injection through the --config option and the Git ext protocol.

exploited simple-git
1t 2c