Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@simple-git/argv-parser

1 known vulnerability (1 critical), with the versions each affects and the releases that fix them.

Latest release
2.0.1 (Sep 26, 2026): no advisory affects it
Newest unaffected release
2.0.1 (Sep 26, 2026), the latest release
Advisories
1 · 1 critical
Weekly downloads
11.1M
Dependents
567
Releases
7 since 1.0.1 (Apr 6, 2026)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • CVE-2026-102829Critical 9.2

    simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

    Affected: fixed in 2.0.1.

    Fixed in 2.0.1 (released Sep 26, 2026, 3 days before disclosure).

    The latest release, 2.0.1, is not affected.

    53% of @simple-git/argv-parser downloads last week were affected versions (6M).