Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000128

sonatype-2026-000128

renovate - Command Injection

Published Jan 14, 2026

https://github.com/advisories/GHSA-fr4j-65pv-gjjj

CVSS ScoreHigh

8.4

Ecosystem	Package	Version


npm	@alexthjun/renovate	1.0.0-alex
npm	@alexthjun/renovate	1.0.1-alex
npm	@alexthjun/renovate	1.0.2-alex
npm	@ckatzorke/renovate	37.301.2
npm	@ckatzorke/renovate	37.302.0
npm	renovate	35.100.0
npm	renovate	35.100.1
npm	renovate	35.100.2
npm	renovate	35.100.3
npm	renovate	35.101.0
npm	renovate	35.102.0
npm	renovate	35.102.10
npm	renovate	35.102.1
npm	renovate	35.102.2
npm	renovate	35.102.3
npm	renovate	35.102.4
npm	renovate	35.102.5
npm	renovate	35.102.6
npm	renovate	35.102.7
npm	renovate	35.102.8
npm	renovate	35.102.9
npm	renovate	35.103.0
npm	renovate	35.104.0
npm	renovate	35.105.0
npm	renovate	35.105.1
npm	renovate	35.105.2
npm	renovate	35.105.3
npm	renovate	35.105.4
npm	renovate	35.105.5
npm	renovate	35.106.0
npm	renovate	35.106.1
npm	renovate	35.107.0
npm	renovate	35.108.0
npm	renovate	35.109.0
npm	renovate	35.110.0
npm	renovate	35.110.1
npm	renovate	35.110.2
npm	renovate	35.111.0
npm	renovate	35.112.0
npm	renovate	35.112.1
npm	renovate	35.113.0
npm	renovate	35.113.1
npm	renovate	35.113.2
npm	renovate	35.113.3
npm	renovate	35.114.0
npm	renovate	35.114.1
npm	renovate	35.114.2
npm	renovate	35.114.3
npm	renovate	35.115.0
npm	renovate	35.115.1

sonatype-2026-000128 | Components Impacted | Sonatype Guide | Sonatype Guide