Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000125

sonatype-2026-000125

renovate - Command Injection

Published Jan 14, 2026

https://github.com/advisories/GHSA-36j9-mx87-2cff

CVSS ScoreHigh

8.4

Ecosystem	Package	Version


npm	@alexthjun/renovate	1.0.0-alex
npm	@alexthjun/renovate	1.0.1-alex
npm	@alexthjun/renovate	1.0.2-alex
npm	@ckatzorke/renovate	0.0.1-semantic-release
npm	@ckatzorke/renovate	37.301.2
npm	@ckatzorke/renovate	37.302.0
npm	renovate	32.135.0
npm	renovate	32.135.1
npm	renovate	32.136.0
npm	renovate	32.136.1
npm	renovate	32.137.0
npm	renovate	32.138.0
npm	renovate	32.139.0
npm	renovate	32.140.0
npm	renovate	32.141.0
npm	renovate	32.142.0
npm	renovate	32.143.0
npm	renovate	32.143.1
npm	renovate	32.144.0
npm	renovate	32.144.1
npm	renovate	32.144.2
npm	renovate	32.145.0
npm	renovate	32.146.0
npm	renovate	32.147.0
npm	renovate	32.148.0
npm	renovate	32.149.0
npm	renovate	32.150.0
npm	renovate	32.150.1
npm	renovate	32.150.2
npm	renovate	32.150.3
npm	renovate	32.150.4
npm	renovate	32.151.0
npm	renovate	32.151.1
npm	renovate	32.151.2
npm	renovate	32.151.3
npm	renovate	32.152.0
npm	renovate	32.153.0
npm	renovate	32.153.1
npm	renovate	32.153.2
npm	renovate	32.153.3
npm	renovate	32.153.4
npm	renovate	32.154.0
npm	renovate	32.154.1
npm	renovate	32.154.2
npm	renovate	32.154.3
npm	renovate	32.154.4
npm	renovate	32.154.5
npm	renovate	32.154.6
npm	renovate	32.154.7
npm	renovate	32.154.8

sonatype-2026-000125 | Components Impacted | Sonatype Guide | Sonatype Guide