StackRadarChart IndexLive demo

CVE-2026-6951

Critical

Advisory

Published 25 Apr 2026In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.009; 57th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 21; of 17,781 indexed, latest versions
Container images: 19; deployed by those charts
Fix available: 1 of 1; affected package

simple-git is vulnerable to Remote Code Execution

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 19 images.

Affected package	Affected versions	Fixed in	Images
simple-gitnpm	1.92.0, 1.122.0, 1.132.0, 2.21.0+10 more	3.36.0	19

OSV records: GHSA-hffm-xvc3-vprc

Charts affected

21 by stars

Chart

Latest

Affected images

Radar Score

n8nn8n

1 of 1 See more

5,639

wikijsgeek-cookbook

1 of 1 See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	simple-git@2.21.0	3.36.0

Open the chart page →

5,946

community-solid-servercommunity-solid-server

1 of 1 See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
solidproject/community-server :6.0.2	ccc4acb7e9a1	simple-git@3.18.0	3.36.0

Open the chart page →

1,613

activepiecesmeyercharts

1 of 1 See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
activepieces/activepieces :0.23.0	c26188b44e62	simple-git@3.21.0	3.36.0

Open the chart page →

2,635

n8none-acre-fund

1 of 3 See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
n8nio/n8n :0.212.0	a9195bc499a3	simple-git@3.16.0	3.36.0

Open the chart page →

7,776

nocodbzekker6

1 of 1 See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.301.5	d9516f0bf546	simple-git@3.33.0	3.36.0

Open the chart page →

4,016

magic-mirrorgeek-cookbook

1 of 1 See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	simple-git@2.37.0	3.36.0

Open the chart page →

4,405

wikiwenerme

1 of 2 See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
requarks/wiki :latest	68f0d1848261	simple-git@3.30.0	3.36.0

Open the chart page →

3,833

astrotrekastria

1 of 4 See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	simple-git@3.22.0	3.36.0

Open the chart page →

32,501

mx-apibicarus-labs

1 of 4 See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	simple-git@2.48.0	3.36.0

Open the chart page →

4,455

developer-dashboardcloud-native-toolkit

1 of 1 See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	simple-git@1.122.0	3.36.0

Open the chart page →

25,456

wikijshomeenterpriseinc

1 of 1 See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
requarks/wiki :canary-2.5.243	8b5865a7386c	simple-git@2.21.0	3.36.0

Open the chart page →

4,253

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-portal :latest	ed5505e5c7ec	simple-git@1.92.0	3.36.0

Open the chart page →

57,669

interbtc-hydrainterlay

1 of 4 See more

interbtc-hydra interlay 0.1.15

1 of the 4 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
interlayhq/interbtc-hydra-processor :master-2c6e16e-1637088364	423d567d47aa	simple-git@2.45.1	3.36.0

Open the chart page →

6,831

n8njanip81-helm-charts

1 of 1 See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
n8nio/n8n :1.86.0	8b39ed5a2de9	simple-git@3.17.0	3.36.0

Open the chart page →

5,826

mauticmautic-chart

1 of 3 See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
mautic/mautic :7-apache	eb8cc73d97e1	simple-git@3.30.0	3.36.0

Open the chart page →

8,303

nexus-tasksnexus-tasks

1 of 5 See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend :2.0.0	fcbab3a24880	simple-git@3.33.0	3.36.0

Open the chart page →

3,798

fdi-dotstatsuite-dlmstatcan

1 of 1 See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
siscc/dotstatsuite-data-lifecycle-manager :v14.0.0	b6f9a7c888fc	simple-git@1.132.0	3.36.0

Open the chart page →

3,881

fdi-dotstatsuite-sfs-solrstatcan

1 of 4 See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
siscc/dotstatsuite-sdmx-faceted-search :master	12c5048f7402	simple-git@1.132.0	3.36.0

Open the chart page →

6,065

fdi-dotstatsuite-sfs-solr-statefulstatcan

1 of 2 See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-6951.

Container image	Digest	Package	Fixed in
siscc/dotstatsuite-sdmx-faceted-search :master	12c5048f7402	simple-git@1.132.0	3.36.0

Open the chart page →

919

wikiwikijs

1 of 2 See more

5,459

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
requarks/wiki :2 :latest	68f0d1848261	simple-git@3.30.0	3.36.0	2
siscc/dotstatsuite-sdmx-faceted-search :master	12c5048f7402	simple-git@1.132.0	3.36.0	2
activepieces/activepieces :0.23.0	c26188b44e62	simple-git@3.21.0	3.36.0	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	simple-git@2.37.0	3.36.0	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	simple-git@2.48.0	3.36.0	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	simple-git@1.92.0	3.36.0	1
interlayhq/interbtc-hydra-processor :master-2c6e16e-1637088364	423d567d47aa	simple-git@2.45.1	3.36.0	1
mautic/mautic :7-apache	eb8cc73d97e1	simple-git@3.30.0	3.36.0	1
n8nio/n8n :1.86.0	8b39ed5a2de9	simple-git@3.17.0	3.36.0	1
n8nio/n8n :0.212.0	a9195bc499a3	simple-git@3.16.0	3.36.0	1
n8nio/n8n :1.33.1	dd171d45102a	simple-git@3.17.0	3.36.0	1
nocodb/nocodb :0.301.5	d9516f0bf546	simple-git@3.33.0	3.36.0	1
requarks/wiki :canary-2.5.243	8b5865a7386c	simple-git@2.21.0	3.36.0	1
siscc/dotstatsuite-data-lifecycle-manager :v14.0.0	b6f9a7c888fc	simple-git@1.132.0	3.36.0	1
solidproject/community-server :6.0.2	ccc4acb7e9a1	simple-git@3.18.0	3.36.0	1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend :2.0.0	fcbab3a24880	simple-git@3.33.0	3.36.0	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	simple-git@3.22.0	3.36.0	1
ghcr.io/linuxserver/wikijs :version-2.5.201	58d377933678	simple-git@2.21.0	3.36.0	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	simple-git@1.122.0	3.36.0	1