https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:04:00.466263+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-renovate-cve-2024-58376 BREW-renovate-CVE-2024-58376 — Renovate 37.158.0 before 37.199.0 Command Injection via helmv3 2026-10-03T12:04:00.526037+00:00

Affected: Homebrew: renovate

Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers with commit access to execute arbitrary commands. Attackers can manipulate registryAliases keys with unquoted shell metacharacters to inject commands executed during helm repo add operations, gaining full access to Renovate's execution environment.

 https://cve.radiocsirt.org/vuln/euvd-2026-378822 EUVD-2026-378822 2026-10-03T12:04:00.526093+00:00 EUVD-2026-378822 https://cve.radiocsirt.org/vuln/fkie_cve-2024-58376 fkie_cve-2024-58376 2026-10-03T12:04:00.526110+00:00

Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers with commit access to execute arbitrary commands. Attackers can manipulate registryAliases keys with unquoted shell metacharacters to inject commands executed during helm repo add operations, gaining full access to Renovate's execution environment.

 https://cve.radiocsirt.org/vuln/ghsa-7vwx-mgm6-w2m7 GHSA-7vwx-mgm6-w2m7 2026-10-03T12:04:00.526135+00:00

Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers with commit access to execute arbitrary commands. Attackers can manipulate registryAliases keys with unquoted shell metacharacters to inject commands executed during helm repo add operations, gaining full access to Renovate's execution environment.