`simple-git`

Ecosystem:
npm

Package URL:
pkg:npm/simple-git

Total PRs:
1,817 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
1,074 repositories

Unique Repos (30 days):
47 repositories

Security Advisories

simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

GHSA-9p95-fxvg-qgq2 CVE-2022-25912 HIGH published over 3 years ago • updated 8 days ago

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution (RCE) when enabling the `ext` transport protocol, which makes it exploi...

Remote code execution in simple-git

GHSA-9w5j-4mwv-2wj8 CVE-2022-25860 CRITICAL published over 3 years ago • updated 8 days ago

Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() met...

View all 7 advisories

Recent PRs

RSS Feed

chore(deps): bump the npm_and_yarn group across 17 directories with 12 updates

Horlabrainmoore/supabase-firebase-deploy---only-functions-hosting #147

3.24.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 12 updates

GlacierEQ/supabase #76

3.24.0 → 3.36.0 Minor PR

Open about 1 month ago 7 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 22 updates

bobdavis84/gemini-cli #22

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 19 updates

alexcolls/qwen-code #31

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 21 updates

thebeastunleashed/gemini-cli #17

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 21 updates

balajirajput96/gemini-cli #25

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 21 updates

suissa/tsx-hrm-agent #23

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates

Dargon789/codesandbox-client #125

3.32.3 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 7 updates

Dargon789/codesandbox-client #119

2.17.0 → 3.36.0 Major PR

Open about 1 month ago 1 comment

chore(deps): bump simple-git from 3.33.0 to 3.36.0

forbiddenlink/specter #49

3.33.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump simple-git from 3.28.0 to 3.36.0

stnjs/wen365 #14

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 18 directories with 11 updates

AKJUS/react #530

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 17 directories with 11 updates

Hawthorne001/react #390

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 17 directories with 11 updates

AKJUS/react #528

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 6 updates

oxsecurity/megalinter #7734

3.33.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

build(deps-dev): bump simple-git from 3.32.3 to 3.36.0

ROpdebee/mb-userscripts #890

3.32.3 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

gastownhall/gastown #3919

3.32.3 → 3.36.0 Minor PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 18 directories with 10 updates

Hawthorne001/react #387

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

gastownhall/gastown #3913

3.32.3 → 3.36.0 Minor PR

Closed about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 16 directories with 15 updates

GlacierEQ/supabase #69

3.24.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 2 directories with 20 updates

GlacierEQ/qwen-code #15

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 4 comments

build(deps): bump the npm_and_yarn group across 3 directories with 20 updates

ahump20/gemini-cli #21

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

build(deps): bump simple-git from 3.33.0 to 3.36.0 in /frontend

activist-org/activist #2140

3.33.0 → 3.36.0 Minor PR

Open about 1 month ago 3 comments

build(deps): bump the npm_and_yarn group across 3 directories with 20 updates

RemyLoveLogicAI/gemini-cli #31

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 7 comments

chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates

dknauss/Sudo #37

3.32.3 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 23 directories with 9 updates

basersalm24/react #105

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 27 directories with 13 updates

joe10832/starters #121

3.27.0 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 17 updates

nsalvacao/qwen-code #14

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 17 updates

dporkka/qwen-code #11

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 14 directories with 11 updates

hashim21223445/cypress #184

3.16.0 → 3.36.0 Minor PR

Closed about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 22 directories with 14 updates

LelandParker/supabase #55

3.24.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 10 directories with 10 updates

GlacierEQ/activepieces #101

3.21.0 → 3.36.0 Minor PR

Closed about 1 month ago 5 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 10 updates

UniversalStandards/activepieces #96

3.21.0 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

Bump simple-git from 3.33.0 to 3.36.0

HegeKen/NuxtMR #52

3.33.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

Bump simple-git from 3.33.0 to 3.36.0

Accenture/sfmc-devtools #2602

3.33.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump simple-git from 3.32.3 to 3.36.0 in /backend

monkeytypegame/monkeytype #7931

3.32.3 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

bs-ageo09/bs-ageo9.org #145

3.33.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 5 updates

adrianjost/Curriculum-Vitae #2414

3.33.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump simple-git from 3.35.2 to 3.36.0

inaturalist/iNaturalistReactNative #3600

3.35.2 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 12 directories with 16 updates

GlacierEQ/activepieces #95

3.21.0 → 3.36.0 Minor PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 8 directories with 2 updates

ValGrace/cloud-developer #13

3.5.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump the npm-dependencies group across 1 directory with 30 updates

Win1817/keycloak #21

3.30.0 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

Bump the npm-dependencies group across 1 directory with 29 updates

sg-evals/keycloak--6fd372cb #20

3.30.0 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

Bump the npm-dependencies group across 1 directory with 28 updates

Code-Review-Assessment-2026/test_subset_6__keycloak__claude__PR37634__20260407 #14

3.32.3 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

Bump the npm-dependencies group across 1 directory with 27 updates

86dh/keycloak #940

3.32.3 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

Bump the npm-dependencies group across 1 directory with 27 updates

thomasdarimont/keycloak #1232

3.32.3 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 21 updates

akiojin/agents #32

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 12 directories with 18 updates

GlacierEQ/activepieces #94

3.21.0 → 3.36.0 Minor PR

Open about 1 month ago 4 comments

Bump simple-git from 3.30.0 to 3.36.0

ivanm696/webpack- #36

3.30.0 → 3.36.0 Minor PR

Open about 1 month ago 4 comments

chore(deps): Bump the npm_and_yarn group across 3 directories with 24 updates

Sakzz1994/metamask-mobile #5

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

Package Details

Name:	`simple-git`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/simple-git`
JSON API:	View JSON

Security Advisories

7

Active advisories

CRITICAL 2

HIGH 5

View All npm Advisories

Package Information

Description:

Simple GIT interface for node.js

Repository:	https://github.com/steveukx/git-js
Homepage:	https://github.com/steveukx/git-js#readme
Latest Release:	`3.27.0` over 1 year ago
Dependent Repos:	93,771
Dependent Packages:	4,498
Downloads:	25,432,252
Ranking:	Top 0.1094% by dependent repos Top 0.0795% by downloads Top 0.0212% by dependent pkgs

PR Status

Open 990 (54.5%)

Merged 22 (1.2%)

Closed 748 (41.2%)

PR Types

Major 62 (3.4%)

Minor 1,654 (91.0%)

Patch 17 (0.9%)

Removal 22 (1.2%)

simple-git

Security Advisories

simple-git is vulnerable to Remote Code Execution

Command injection in simple-git

Command injection in simple-git

simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

Remote code execution in simple-git

Recent PRs

Package Details

Security Advisories

7

Package Information

PR Status

PR Types

`simple-git`