Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000127

sonatype-2026-000127

renovate - OS Command Injection

Published Jan 14, 2026

https://github.com/advisories/GHSA-pfq2-hh62-7m96

CVSS ScoreMedium

6.7

Ecosystem	Package	Version


npm	renovate	32.124.0
npm	renovate	32.125.0
npm	renovate	32.126.0
npm	renovate	32.126.1
npm	renovate	32.126.2
npm	renovate	32.127.0
npm	renovate	32.127.1
npm	renovate	32.127.2
npm	renovate	32.127.3
npm	renovate	32.127.4
npm	renovate	32.127.5
npm	renovate	32.128.0
npm	renovate	32.129.0
npm	renovate	32.130.0
npm	renovate	32.131.0
npm	renovate	32.131.1
npm	renovate	32.131.2
npm	renovate	32.131.3
npm	renovate	32.132.0
npm	renovate	32.132.1
npm	renovate	32.133.0
npm	renovate	32.133.1
npm	renovate	32.134.0
npm	renovate	32.135.0
npm	renovate	32.135.1
npm	renovate	32.136.0
npm	renovate	32.136.1
npm	renovate	32.137.0
npm	renovate	32.138.0
npm	renovate	32.139.0
npm	renovate	32.140.0
npm	renovate	32.141.0
npm	renovate	32.142.0
npm	renovate	32.143.0
npm	renovate	32.143.1
npm	renovate	32.144.0
npm	renovate	32.144.1
npm	renovate	32.144.2
npm	renovate	32.145.0
npm	renovate	32.146.0
npm	renovate	32.147.0
npm	renovate	32.148.0
npm	renovate	32.149.0
npm	renovate	32.150.0
npm	renovate	32.150.1
npm	renovate	32.150.2
npm	renovate	32.150.3
npm	renovate	32.150.4
npm	renovate	32.151.0
npm	renovate	32.151.1

sonatype-2026-000127 | Components Impacted | Sonatype Guide | Sonatype Guide