https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:50:27 +0000 https://cve.radiocsirt.org/vuln/brew-renovate-cve-2026-76230 <p><strong>Affected:</strong> Homebrew: renovate</p> <p>Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.</p> <p><strong>Affected:</strong> Homebrew: renovate</p> <p>Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.</p> https://cve.radiocsirt.org/vuln/brew-renovate-cve-2026-76230 https://cve.radiocsirt.org/vuln/euvd-2026-357494 EUVD-2026-357494 https://cve.radiocsirt.org/vuln/euvd-2026-357494 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76230 <p>Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.</p> <p>Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-76230 https://cve.radiocsirt.org/vuln/ghsa-8rp2-gc6p-4hgp <p>Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.</p> <p>Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.</p> https://cve.radiocsirt.org/vuln/ghsa-8rp2-gc6p-4hgp