Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000129

sonatype-2026-000129

renovate - Command Injection

Published Jan 14, 2026

https://github.com/advisories/GHSA-xjr7-3c3g-m763

CVSS ScoreHigh

8.4

Ecosystem	Package	Version


npm	renovate	39.100.0
npm	renovate	39.100.1
npm	renovate	39.100.2
npm	renovate	39.101.0
npm	renovate	39.102.0
npm	renovate	39.103.0
npm	renovate	39.104.0
npm	renovate	39.104.1
npm	renovate	39.104.2
npm	renovate	39.104.3
npm	renovate	39.105.0
npm	renovate	39.105.1
npm	renovate	39.106.0
npm	renovate	39.106.1
npm	renovate	39.107.0
npm	renovate	39.107.1
npm	renovate	39.107.2
npm	renovate	39.107.3
npm	renovate	39.108.0
npm	renovate	39.109.0
npm	renovate	39.110.0
npm	renovate	39.111.0
npm	renovate	39.111.1
npm	renovate	39.112.0
npm	renovate	39.113.0
npm	renovate	39.114.0
npm	renovate	39.115.0
npm	renovate	39.115.1
npm	renovate	39.115.2
npm	renovate	39.115.3
npm	renovate	39.115.4
npm	renovate	39.116.0
npm	renovate	39.116.1
npm	renovate	39.117.0
npm	renovate	39.117.1
npm	renovate	39.117.2
npm	renovate	39.117.3
npm	renovate	39.118.0
npm	renovate	39.118.1
npm	renovate	39.118.2
npm	renovate	39.118.3
npm	renovate	39.118.4
npm	renovate	39.118.5
npm	renovate	39.119.0
npm	renovate	39.119.1
npm	renovate	39.119.2
npm	renovate	39.120.0
npm	renovate	39.120.1
npm	renovate	39.120.2
npm	renovate	39.120.3

sonatype-2026-000129 | Components Impacted | Sonatype Guide | Sonatype Guide