Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000124

sonatype-2026-000124

renovate - Command Injection

Published Jan 14, 2026

https://github.com/advisories/GHSA-3f44-xw83-3pmg

CVSS ScoreHigh

8.4

Ecosystem	Package	Version


npm	@alexthjun/renovate	1.0.0-alex
npm	@alexthjun/renovate	1.0.1-alex
npm	@alexthjun/renovate	1.0.2-alex
npm	@ckatzorke/renovate	0.0.0-semantic-release
npm	@ckatzorke/renovate	0.0.1-semantic-release
npm	@ckatzorke/renovate	37.301.2
npm	@ckatzorke/renovate	37.302.0
npm	renovate	31.51.0
npm	renovate	31.52.0
npm	renovate	31.53.0
npm	renovate	31.53.1
npm	renovate	31.53.2
npm	renovate	31.54.0
npm	renovate	31.55.0
npm	renovate	31.56.0
npm	renovate	31.57.0
npm	renovate	31.57.1
npm	renovate	31.58.0
npm	renovate	31.58.1
npm	renovate	31.58.2
npm	renovate	31.58.3
npm	renovate	31.58.4
npm	renovate	31.58.5
npm	renovate	31.59.0
npm	renovate	31.59.1
npm	renovate	31.60.0
npm	renovate	31.60.1
npm	renovate	31.61.0
npm	renovate	31.61.1
npm	renovate	31.61.2
npm	renovate	31.61.3
npm	renovate	31.62.0
npm	renovate	31.63.0
npm	renovate	31.63.1
npm	renovate	31.63.2
npm	renovate	31.64.0
npm	renovate	31.64.1
npm	renovate	31.64.2
npm	renovate	31.65.0
npm	renovate	31.65.1
npm	renovate	31.65.2
npm	renovate	31.65.3
npm	renovate	31.66.0
npm	renovate	31.66.1
npm	renovate	31.66.2
npm	renovate	31.66.3
npm	renovate	31.66.4
npm	renovate	31.66.5
npm	renovate	31.66.6
npm	renovate	31.67.0

sonatype-2026-000124 | Components Impacted | Sonatype Guide | Sonatype Guide