Mmastodon TechnologyCybersecurity first seen 10 h ago, last 10 h ago, peak #6

High-severity command injection flaw fixed in Renovate

Original: 🚨 EUVD-2024-55728 📊 Score: 8.4/10 (CVSS v3.1) 📦 Product: renovate 🏢 Vendor: renovatebot 📅 Published: 2026-08-19 | Update

A high-severity vulnerability, EUVD-2024-55728, was published for Renovate, the popular open-source dependency update tool maintained by renovatebot. Versions 37.158.0 before 37.199.0 contain a command injection flaw in the helmv3 manager's registryAliases handling, rated 8.4 out of 10 on the CVSS v3.1 scale. Users are being urged to update to a patched release, as the bug could allow attackers to execute arbitrary commands through manipulated registry alias values.

Why now: Security teams are flagging the vulnerability because Renovate is widely used for automated dependency updates and the flaw allows command injection.

RenovaterenovatebotEUVD-2024-55728

Open on mastodon →

Evidence

• 🚨 EUVD-2024-55728 📊 Score: 8.4/10 (CVSS v3.1) 📦 Product: renovate 🏢 Vendor: renovatebot 📅 Published: 2026-08-19 | Updated: 2026-09-29 📝 Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/413615