Package
gemini-cli
Component
simple-git
Latest update
8.1
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
gemini-cli depends on simple-git 3.x, and this vulnerability is fixed only in simple-git 4.0.0 and later. simple-git 4 adds an environment-variable guard that rejects the git environment gemini-cli passes to it, so substituting the fixed version makes the git operations behind gemini-cli checkpointing fail. Remediation requires an upstream gemini-cli release that adopts simple-git 4.
Status