simple-git

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Command InjectionCVE-2022-24066Simple-Git Project · CVSS 8.1 · 3.9% likely

   CWE-88

2. Command InjectionCVE-2022-24433Simple-Git Project · CVSS 8.1 · 3.7% likely

   CWE-88

3. Remote Code Execution (RCE)CVE-2022-25912Simple-Git Project · CVSS 8.1 · 3.1% likely

   CWE-78

4. Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() methods, due to improper input sani…CVE-2022-25860Simple-Git Project · CVSS 8.1 · 2.8% likely

   CWE-94

5. Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-…CVE-2026-6951Simple-Git Project · CVSS 9.8 · 0.9% likely

   CWE-94

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.