CVE-2026-102829
CriticalAdvisory
Published 5 Oct 2026In the index since 6 Oct 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.2
- base score, highest
- EPSS
- 0.003
- 18th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 15
- of 18,035 indexed, latest versions
- Container images
- 14
- deployed by those charts
- Fix available
- 1 of 1
- affected package
simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
Carried by container images the latest versions of 15 of 18,035 indexed charts deploy, on 14 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| @simple-git/ | 1.1.1 | 2.0.1 | 14 |
- OSV records
- GHSA-v5rq-49vh-5v5c
Charts affected
15 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| n8ncommunity-chartsVerified publisher | 1.24.43 | 1 of 1See more | 1,436 |
| n8nopen-8gears | 2.1.1 | 1 of 1See more | 2,298 |
| n8nhelmforgeVerified publisher | 2.1.3 | 1 of 2See more | 1,797 |
| directusdirectus-io | 2.1.0 | 1 of 3See more | 9,382 |
| mend-renovate-enterprise-editionmend-renovateVerified publisher | 10.7.0 | 1 of 2See more | 37,125 |
| n8nn8n-helm | 2.25.7 | 1 of 1See more | 3,858 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 36,191 |
| supabasesupabse | 0.8.0 | 1 of 11See more | 21,571 |
| activepiecesadnoctemVerified publisher | 0.7.0 | 1 of 1See more | 1,814 |
| n8nn8n-openshiftVerified publisher | 1.18.0 | 1 of 1See more | 2,298 |
| n8nopenshift | 1.18.0 | 1 of 1See more | 2,298 |
| prismeai-coreprismeai | 1.12.3 | 1 of 7See more | 5,689 |
| elkrivals-spaceVerified publisher | 0.1.1 | 1 of 1See more | 410 |
| elk-frontendschoenwald | 0.2.22 | 1 of 1See more | 683 |
| supabaseteochenglim | 0.1.2 | 1 of 13See more | 10,711 |
Container images carrying it
14 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| n8nio/ | 14c4285bc303 | @simple-git/ | 2.0.1 | 2 |
| activepieces/ | d22e3f36f78d | @simple-git/ | 2.0.1 | 1 |
| directus/ | 9c8470ea465c | @simple-git/ | 2.0.1 | 1 |
| n8nio/ | 761374d4eb84 | @simple-git/ | 2.0.1 | 1 |
| n8nio/ | 87e0bab2c931 | @simple-git/ | 2.0.1 | 1 |
| n8nio/ | cfe2704ff858 | @simple-git/ | 2.0.1 | 1 |
| n8nio/ | fdce8f852ac7 | @simple-git/ | 2.0.1 | 1 |
| supabase/ | 606aca9fdaa7 | @simple-git/ | 2.0.1 | 1 |
| supabase/ | fdb56cfa1705 | @simple-git/ | 2.0.1 | 1 |
| treskon/ | e7970783bc8d | @simple-git/ | 2.0.1 | 1 |
| ghcr.io/ | 236faedcb68a | @simple-git/ | 2.0.1 | 1 |
| ghcr.io/ | d31e95cf9a89 | @simple-git/ | 2.0.1 | 1 |
| ghcr.io/ | 63e0ca823222 | @simple-git/ | 2.0.1 | 1 |
| registry.gitlab.com/ | e64a1cb3aa42 | @simple-git/ | 2.0.1 | 1 |