Tag

simple-git

Safeguard articles tagged "simple-git" — guides, analysis, and best practices for software supply chain and application security.

1 article

AppSec

simple-git: Command Injection CVEs and Safe Usage Patterns

The npm simple-git library went through a chain of argument injection CVEs in 2022, each an incomplete fix of the last. The history is a case study in why wrapping a CLI safely is hard.

Apr 30, 20257 min read