`simple-git`

Ecosystem:
npm

Package URL:
pkg:npm/simple-git

Total PRs:
1,818 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
1,074 repositories

Unique Repos (30 days):
41 repositories

Security Advisories

simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

GHSA-9p95-fxvg-qgq2 CVE-2022-25912 HIGH published over 3 years ago • updated 9 days ago

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution (RCE) when enabling the `ext` transport protocol, which makes it exploi...

Remote code execution in simple-git

GHSA-9w5j-4mwv-2wj8 CVE-2022-25860 CRITICAL published over 3 years ago • updated 9 days ago

Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() met...

View all 7 advisories

Recent PRs

RSS Feed

chore(deps): Bump the npm_and_yarn group across 3 directories with 24 updates

Sakzz1994/metamask-mobile #5

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 17 updates

billlzzz10/Obsidian_Synapse_Core #33

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 4 comments

chore(deps-dev): bump simple-git from 3.33.0 to 3.36.0

asyncapi/java-spring-template #485

3.33.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

fix(deps): bump simple-git from 3.33.0 to 3.36.0

michielgerritsen/magento2-model-generator #968

3.33.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps-dev): bump simple-git from 3.33.0 to 3.36.0 in the npm_and_yarn group across 1 directory

exelearning/wp-exelearning #26

3.33.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 13 directories with 17 updates

UniversalStandards/activepieces #91

3.21.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 3 directories with 19 updates

AKA-NETWORK/gemini-cli #20

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump simple-git from 3.30.0 to 3.36.0 in /frontend

StardustArch/SGI #43

3.30.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 26 directories with 11 updates

alokkulkarni/starters #106

3.27.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

build(deps): bump the npm_and_yarn group across 13 directories with 9 updates

snewmanri/learning-vue-app #29

3.27.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 19 updates

bountymac/qwen-code #14

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 19 updates

jtrag/gemini-cli #9

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump simple-git from 3.30.0 to 3.36.0

timgivois/personal-blog #119

3.30.0 → 3.36.0 Minor PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 23 directories with 9 updates

chien110234/react #35

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 20 updates

bobdavis84/gemini-cli #20

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump simple-git from 3.27.0 to 3.36.0 in /tests/workflows

scality/Zenko #2402

3.27.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump simple-git from 3.28.0 to 3.36.0

krsjenmt/gemini-cli #84

3.28.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 23 directories with 8 updates

basersalm24/react #102

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 17 updates

nssuwan186-dev/qwen-code #5

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump simple-git from 3.16.0 to 3.36.0

EStog/metrics #371

3.16.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

Bump simple-git from 3.32.3 to 3.36.0

Azure/Azure-Sentinel #14222

3.32.3 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

Bump simple-git from 3.10.0 to 3.36.0 in /scripts

Erdemhasates35/devtools-protocol #2

3.10.0 → 3.36.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 13 directories with 18 updates

UniversalStandards/activepieces #87

3.21.0 → 3.36.0 Minor PR

Closed about 1 month ago 3 comments

deps: bump simple-git from 3.35.2 to 3.36.0

City-of-Helsinki/kerrokantasi-ui #1289

3.35.2 → 3.36.0 Minor PR

Open about 1 month ago 3 comments

Bump the npm_and_yarn group across 13 directories with 21 updates

GlacierEQ/activepieces #88

3.21.0 → 3.36.0 Minor PR

Open about 1 month ago 4 comments

Bump the npm_and_yarn group across 13 directories with 22 updates

GlacierEQ/activepieces #87

3.21.0 → 3.36.0 Minor PR

Open about 1 month ago 6 comments

feat(deps): bump simple-git from 3.21.0 to 3.36.0

braintrustdata/braintrust-sdk-javascript #1951

3.21.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 20 updates

dinohatibovic/gemini-cli #11

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 16 updates

billlzzz10/Obsidian_Synapse_Core #32

3.28.0 → 3.36.0 Minor PR

Closed about 1 month ago 6 comments

Bump the npm_and_yarn group across 1 directory with 6 updates

ali963git/keycloak #4

3.30.0 → 3.36.0 Minor PR

Open about 1 month ago 2 comments

build(deps): bump simple-git from 3.33.0 to 3.36.0

google-gemini/gemini-cli #26546

3.33.0 → 3.36.0 Minor PR

Closed about 1 month ago 2 comments

build(deps): bump simple-git from 3.33.0 to 3.36.0 in the npm_and_yarn group across 1 directory

awslabs/ml-container-creator #145

3.33.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 70 updates

84luska84/sega-cli #20

3.33.0 → 3.36.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 71 updates

kernyx-ai/agent-cli #23

3.33.0 → 3.36.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 71 updates

stevenAthompson/gemini-cli-remote-control #24

3.33.0 → 3.36.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 15 directories with 10 updates

rfennell/AzurePipelines #2247

3.23.0 → 3.32.3 Minor PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 8 directories with 10 updates

Kaairofelipe/kilocode #9

3.27.0 → 3.32.3 Minor PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 16 updates

billlzzz10/Obsidian_Synapse_Core #31

3.28.0 → 3.32.3 Minor PR

Open about 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 23 directories with 17 updates

ANT0071/langchainjs #11

3.27.0 → 3.36.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 23 directories with 17 updates

c6ai/langchainjs #14

3.27.0 → 3.36.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 20 directories with 18 updates

idgrou/langchainjsN8N #76

3.27.0 → 3.36.0 Minor PR

Open about 2 months ago 1 comment

Bump the npm-dependencies group across 1 directory with 70 updates

Kztutorial99/GeminiCLI #28

3.28.0 → 3.36.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 8 updates

RainbowScientist5/codesandbox-Rainbowscientist-client #39

2.17.0 → 3.32.3 Major PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 11 directories with 31 updates

Surfndez/react #8

3.28.0 → 3.36.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 19 updates

GlacierEQ/qwen-code #13

3.28.0 → 3.36.0 Minor PR

Open about 2 months ago 3 comments

build(deps): bump the npm_and_yarn group across 3 directories with 19 updates

RemyLoveLogicAI/gemini-cli #29

3.28.0 → 3.36.0 Minor PR

Open about 2 months ago 6 comments

deps(npm): bump the npm_and_yarn group across 1 directory with 9 updates

veillette/physics-book #269

3.30.0 → 3.32.3 Minor PR

Closed about 2 months ago 3 comments

Bump simple-git from 3.27.0 to 3.36.0 in /js

benchmark-large-codebase/keyclock_qodo_retry__keycloak__qodo__PR36880__20260502 #23

3.27.0 → 3.36.0 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 9 updates

ICholding/omo-startup-2.0 #57

3.31.1 → 3.36.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 28 updates

MTES-MCT/resorption-bidonvilles #1469

3.28.0 → 3.36.0 Minor PR

Open about 2 months ago 2 comments

Package Details

Name:	`simple-git`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/simple-git`
JSON API:	View JSON

Security Advisories

7

Active advisories

CRITICAL 2

HIGH 5

View All npm Advisories

Package Information

Description:

Simple GIT interface for node.js

Repository:	https://github.com/steveukx/git-js
Homepage:	https://github.com/steveukx/git-js#readme
Latest Release:	`3.27.0` over 1 year ago
Dependent Repos:	93,771
Dependent Packages:	4,498
Downloads:	25,432,252
Ranking:	Top 0.1094% by dependent repos Top 0.0795% by downloads Top 0.0212% by dependent pkgs

PR Status

Open 990 (54.5%)

Merged 22 (1.2%)

Closed 749 (41.2%)

PR Types

Major 62 (3.4%)

Minor 1,655 (91.0%)

Patch 17 (0.9%)

Removal 22 (1.2%)

simple-git

Security Advisories

simple-git is vulnerable to Remote Code Execution

Command injection in simple-git

Command injection in simple-git

simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

Remote code execution in simple-git

Recent PRs

Package Details

Security Advisories

7

Package Information

PR Status

PR Types

`simple-git`