CVE-2026-28292: How a Simple Case-Sensitivity Bug Turns simple-git Into a Remote Code Execution Weapon (CVSS 9.8)

TL;DR A critical vulnerability (CVSS 9.8) in simple-git — one of the most popular Node.js Git libraries with millions of weekly downloads — allows attackers to achieve full remote code execution by simply changing the casing of a config key. Yes, you...