https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:47:19.846815+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-renovate-cve-2026-76232 BREW-renovate-CVE-2026-76232 — Renovate 31.51.0 before 40.33.0 Command Injection via helmv3 2026-10-03T15:47:19.851127+00:00

Affected: Homebrew: renovate

Renovate versions from 31.51.0 before 40.33.0 contain a command injection vulnerability in the helmv3 manager where the repository parameter is appended to helm registry login commands without proper sanitization. Attackers with repository write access can craft malicious Chart.yaml files to execute arbitrary commands on the machine running Renovate.

 https://cve.radiocsirt.org/vuln/euvd-2026-358403 EUVD-2026-358403 2026-10-03T15:47:19.851179+00:00 EUVD-2026-358403 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76232 fkie_cve-2026-76232 2026-10-03T15:47:19.851195+00:00

Renovate versions from 31.51.0 before 40.33.0 contain a command injection vulnerability in the helmv3 manager where the repository parameter is appended to helm registry login commands without proper sanitization. Attackers with repository write access can craft malicious Chart.yaml files to execute arbitrary commands on the machine running Renovate.

 https://cve.radiocsirt.org/vuln/ghsa-v5qg-6f86-qw4x GHSA-v5qg-6f86-qw4x 2026-10-03T15:47:19.851234+00:00

Renovate versions from 31.51.0 before 40.33.0 contain a command injection vulnerability in the helmv3 manager where the repository parameter is appended to helm registry login commands without proper sanitization. Attackers with repository write access can craft malicious Chart.yaml files to execute arbitrary commands on the machine running Renovate.