CVE-2026-102828
CriticalAdvisory
Published 5 Oct 2026In the index since 6 Oct 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.2
- base score, highest
- EPSS
- 0.003
- 18th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 29
- of 18,035 indexed, latest versions
- Container images
- 27
- deployed by those charts
- Fix available
- 1 of 1
- affected package
simple-git unsafe-operation guard does not block trailer command configuration
Carried by container images the latest versions of 29 of 18,035 indexed charts deploy, on 27 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| simple-gitnpm | 3.16.0, 3.17.0, 3.18.0, 3.21.0+5 more | 4.0.1 | 27 |
- OSV records
- GHSA-x6jw-m9v5-85vh
Charts affected
29 by stars
Container images carrying it
27 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| n8nio/ | 14c4285bc303 | simple-git | 4.0.1 | 2 |
| requarks/ | fffff288a52f | simple-git | 4.0.1 | 2 |
| activepieces/ | a12efde0c535 | simple-git | 4.0.1 | 1 |
| activepieces/ | c26188b44e62 | simple-git | 4.0.1 | 1 |
| activepieces/ | d22e3f36f78d | simple-git | 4.0.1 | 1 |
| directus/ | 9c8470ea465c | simple-git | 4.0.1 | 1 |
| mautic/ | eb8cc73d97e1 | simple-git | 4.0.1 | 1 |
| n8nio/ | 761374d4eb84 | simple-git | 4.0.1 | 1 |
| n8nio/ | 87e0bab2c931 | simple-git | 4.0.1 | 1 |
| n8nio/ | 8b39ed5a2de9 | simple-git | 4.0.1 | 1 |
| n8nio/ | a9195bc499a3 | simple-git | 4.0.1 | 1 |
| n8nio/ | cfe2704ff858 | simple-git | 4.0.1 | 1 |
| n8nio/ | dd171d45102a | simple-git | 4.0.1 | 1 |
| n8nio/ | ed16e560c40e | simple-git | 4.0.1 | 1 |
| n8nio/ | fdce8f852ac7 | simple-git | 4.0.1 | 1 |
| nocodb/ | d9516f0bf546 | simple-git | 4.0.1 | 1 |
| requarks/ | af71a17dc27c | simple-git | 4.0.1 | 1 |
| solidproject/ | ccc4acb7e9a1 | simple-git | 4.0.1 | 1 |
| supabase/ | 606aca9fdaa7 | simple-git | 4.0.1 | 1 |
| supabase/ | fdb56cfa1705 | simple-git | 4.0.1 | 1 |
| treskon/ | e7970783bc8d | simple-git | 4.0.1 | 1 |
| ghcr.io/ | fcbab3a24880 | simple-git | 4.0.1 | 1 |
| ghcr.io/ | 5889bea38e56 | simple-git | 4.0.1 | 1 |
| ghcr.io/ | 236faedcb68a | simple-git | 4.0.1 | 1 |
| ghcr.io/ | d31e95cf9a89 | simple-git | 4.0.1 | 1 |
| ghcr.io/ | 63e0ca823222 | simple-git | 4.0.1 | 1 |
| registry.gitlab.com/ | e64a1cb3aa42 | simple-git | 4.0.1 | 1 |