Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Renovate could allow unauthorized code execution
published 5 days ago
Summary
The Renovate tool can be tricked into running malicious code, which could let an attacker take control of the system it runs on. Updating Renovate to a newer version fixes the problem. Install the latest release as soon as possible to stay protected.
What to do
- Update cleanstart renovate to version 43.181.2-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | renovate |
< 43.181.2-r1 Fix: upgrade to 43.181.2-r1
|
Original advisory text
Security fix for GHSA-5p4m-2wfm-xmqj applied in: renovate 43.181.2-r1
Security vulnerability affects the renovate package. This issue is resolved in later releases. See references for vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-HN54565 · OSV
Track software like this
Free during beta