Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x7x2-5fmx-8wj5

Опубликовано: 10 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.3
CVSS3: 7

Описание

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in binarySource=docker mode.

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in binarySource=docker mode.

EPSS

Процентиль: 42%
0.0051
Низкий

7.3 High

CVSS4

7 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7
redhat
13 дней назад

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in binarySource=docker mode.

CVSS3: 7
nvd
13 дней назад

Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization parameters. Attackers can inject shell metacharacters through malicious package names to execute arbitrary commands as the Renovate user in binarySource=docker mode.

EPSS

Процентиль: 42%
0.0051
Низкий

7.3 High

CVSS4

7 High

CVSS3

Дефекты

CWE-78