High
Renovate 35.63.0 before 40.33.0 Command Injection via npm
Type: advisorySources: OSV
Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-76230
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 01:23 UTC · Revision 1
Source evidence
Renovate 35.63.0 before 40.33.0 Command Injection via npm
core-osv · Original sourcePublished 19 Aug 2026, 14:02 UTC
Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.
osv:CVE-2026-76230
Complete source record
{
"id": "142d5292de35bab4d7fc4135ad9485162fbce854945b55af6b3d073edf67a857",
"url": "https://osv.dev/vulnerability/CVE-2026-76230",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Renovate 35.63.0 before 40.33.0 Command Injection via npm",
"summary": "Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended to npm install commands without proper sanitization. Attackers with repository write access can craft malicious Renovate configuration files to execute arbitrary commands on the machine running Renovate.",
"evidence": "osv:CVE-2026-76230",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-76230",
"aliases": [
"CVE-2026-76230",
"GHSA-fr4j-65pv-gjjj"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/renovatebot/renovate",
"type": "GIT",
"events": [
{
"introduced": "d03f96d0e3f2fcf154f8658749747910a105caf5"
},
{
"fixed": "c3a6a73c7970414e8f65741b4e207f532d898a48"
},
{
"fixed": "012c0ac2fe32832e60a62bde405c0a241efd314c"
},
{
"fixed": "a70a6a376d31148e80be5a5c885ac33ff5ddb30c"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "35.63.0"
},
{
"fixed": "40.33.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"fixed": "012c0ac2fe32832e60a62bde405c0a241efd314c"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "a70a6a376d31148e80be5a5c885ac33ff5ddb30c"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"38.119.0",
"38.118.0",
"38.117.1",
"38.117.0",
"38.116.0",
"38.115.1",
"38.115.0",
"38.114.0",
"38.113.0",
"38.112.0",
"38.111.1",
"38.111.0",
"38.110.5",
"38.110.4",
"38.110.3",
"38.110.2",
"38.110.1",
"38.110.0",
"38.109.1",
"38.109.0",
"38.108.0",
"38.107.1",
"38.107.0",
"38.106.4",
"38.106.3",
"38.106.2",
"38.106.1",
"38.106.0",
"38.105.2",
"38.105.1",
"38.105.0",
"38.104.0",
"38.103.1",
"38.103.0",
"38.102.0",
"38.101.1",
"38.101.0",
"38.100.1",
"38.100.0",
"38.99.0",
"38.98.1",
"38.98.0",
"38.97.1",
"38.97.0",
"38.96.1",
"38.96.0",
"38.95.4",
"38.95.3",
"38.95.2",
"38.95.1",
"38.95.0",
"38.94.3",
"38.94.2",
"38.94.1",
"38.94.0",
"38.93.6",
"38.93.5",
"38.93.4",
"38.93.3",
"38.93.2",
"38.93.1",
"38.93.0",
"38.92.1",
"38.92.0",
"38.91.5",
"38.91.4",
"38.91.3",
"38.91.2",
"38.91.1",
"38.91.0",
"38.90.0",
"38.89.3",
"38.89.2",
"38.89.1",
"38.89.0",
"38.88.2",
"38.88.1",
"38.88.0",
"38.87.1",
"38.87.0",
"38.86.0",
"38.85.2",
"38.85.1",
"38.85.0",
"38.84.1",
"38.84.0",
"38.83.0",
"38.82.1",
"38.82.0",
"38.81.0",
"38.80.0",
"38.79.0",
"38.78.0",
"38.77.8",
"38.77.7",
"38.77.6",
"38.77.5",
"38.77.4",
"38.77.3",
"38.77.2",
"38.77.1",
"38.77.0",
"38.76.1",
"38.76.0",
"38.75.0",
"38.74.1",
"38.74.0",
"38.73.7",
"38.73.6",
"38.73.5",
"38.73.4",
"38.73.3",
"38.73.2",
"38.73.1",
"38.73.0",
"38.72.2",
"38.72.1",
"38.72.0",
"38.71.0",
"38.70.3",
"38.70.2",
"38.70.1",
"38.70.0",
"38.69.0",
"38.68.1",
"38.68.0",
"38.67.5",
"38.67.4",
"38.67.3",
"38.67.2",
"38.67.1",
"38.67.0",
"38.66.1",
"38.66.0",
"38.65.0",
"38.64.2",
"38.64.1",
"38.64.0",
"38.63.0",
"38.62.0",
"38.61.1",
"38.61.0",
"38.60.0",
"38.59.3",
"38.59.2",
"38.59.1",
"38.59.0",
"38.58.2",
"38.58.1",
"38.58.0",
"38.57.3",
"38.57.2",
"38.57.1",
"38.57.0",
"38.56.4",
"38.56.3",
"38.56.2",
"38.56.1",
"38.56.0",
"38.55.5",
"38.55.4",
"38.55.3",
"38.55.2",
"38.55.1",
"38.55.0",
"38.54.1",
"38.54.0",
"38.53.0",
"38.52.3",
"38.52.2",
"38.52.1",
"38.52.0",
"38.51.1",
"38.51.0",
"38.50.0",
"38.49.0",
"38.48.0",
"38.47.0",
"38.46.3",
"38.46.2",
"38.46.1",
"38.46.0",
"38.45.0",
"38.44.3",
"38.44.2",
"38.44.1",
"38.44.0",
"38.43.1",
"38.43.0",
"38.42.0",
"38.41.1",
"38.41.0",
"38.40.1",
"38.40.0",
"38.39.6",
"38.39.5",
"38.39.4",
"38.39.3",
"38.39.2",
"38.39.1",
"38.39.0",
"38.38.1",
"38.38.0",
"38.37.1",
"38.37.0",
"38.36.0",
"38.35.0",
"38.34.0",
"38.33.1",
"38.33.0",
"38.32.1",
"38.32.0",
"38.31.0",
"38.30.1",
"38.30.0",
"38.29.0",
"38.28.2",
"38.28.1",
"38.28.0",
"38.27.1",
"38.27.0",
"38.26.1",
"38.26.0",
"38.25.4",
"38.25.3",
"38.25.2",
"38.25.1",
"38.25.0",
"38.24.1",
"38.24.0",
"38.23.3",
"38.23.2",
"38.23.1",
"38.23.0",
"38.22.0",
"38.21.5",
"38.21.4",
"38.21.3",
"38.21.2",
"38.21.1",
"38.21.0",
"38.20.1",
"38.20.0",
"38.19.2",
"38.19.1",
"38.19.0",
"38.18.17",
"38.18.16",
"38.18.15",
"38.18.14",
"38.18.13",
"38.18.12",
"38.18.11",
"38.18.10",
"38.18.9",
"38.18.8",
"38.18.7",
"38.18.6",
"38.18.5",
"38.18.4",
"38.18.3",
"38.18.2",
"38.18.1",
"38.18.0",
"38.17.1",
"38.17.0",
"38.16.1",
"38.16.0",
"38.15.1",
"38.15.0",
"38.14.0",
"38.13.4",
"38.13.3",
"38.13.2",
"38.13.1",
"38.13.0",
"38.12.0",
"38.11.1",
"38.11.0",
"38.10.1",
"38.10.0",
"38.9.5",
"38.9.4",
"38.9.3",
"38.9.2",
"38.9.1",
"38.9.0",
"38.8.5",
"38.8.4",
"38.8.3",
"38.8.2",
"38.8.1",
"38.8.0",
"38.7.1",
"38.7.0",
"38.6.1",
"38.6.0",
"38.5.0",
"38.4.0",
"38.3.0",
"38.2.1",
"38.2.0",
"38.1.0",
"38.0.0",
"37.440.7",
"37.440.6",
"37.440.5",
"37.440.4",
"37.440.3",
"37.440.2",
"37.440.1",
"37.440.0",
"37.439.0",
"37.438.5",
"37.438.4",
"37.438.3",
"37.438.2",
"37.438.1",
"37.438.0",
"37.437.3",
"37.437.2",
"37.437.1",
"37.437.0",
"37.436.0",
"37.435.1",
"37.435.0",
"37.434.3",
"37.434.2",
"37.434.1",
"37.434.0",
"37.433.2",
"37.433.1",
"37.433.0",
"37.432.0",
"37.431.7",
"37.431.6",
"37.431.5",
"37.431.4",
"37.431.3",
"37.431.2",
"37.431.1",
"37.431.0",
"37.430.0",
"37.429.1",
"37.429.0",
"37.428.3",
"37.428.2",
"37.428.1",
"37.428.0",
"37.427.0",
"37.426.5",
"37.426.4",
"37.426.3",
"37.426.2",
"37.426.1",
"37.426.0",
"37.425.3",
"37.425.2",
"37.425.1",
"37.425.0",
"37.424.4",
"37.424.3",
"37.424.2",
"37.424.1",
"37.424.0",
"37.423.1",
"37.423.0",
"37.422.4",
"37.422.3",
"37.422.2",
"37.422.1",
"37.422.0",
"37.421.10",
"37.421.9",
"37.421.8",
"37.421.7",
"37.421.6",
"37.421.5",
"37.421.4",
"37.421.3",
"37.421.2",
"37.421.1",
"37.421.0",
"37.420.1",
"37.420.0",
"37.419.1",
"37.419.0",
"37.418.3",
"37.418.2",
"37.418.1",
"37.418.0",
"37.417.2",
"37.417.1",
"37.417.0",
"37.416.1",
"37.416.0",
"37.415.0",
"37.414.1",
"37.414.0",
"37.413.5",
"37.413.4",
"37.413.3",
"37.413.2",
"37.413.1",
"37.413.0",
"37.412.2",
"37.412.1",
"37.412.0",
"37.411.0",
"37.410.3",
"37.410.2",
"37.410.1",
"37.410.0",
"37.409.2",
"37.409.1",
"37.409.0",
"37.408.3",
"37.408.2",
"37.408.1",
"37.408.0",
"37.407.4",
"37.407.3",
"37.407.2",
"37.407.1",
"37.407.0",
"37.406.2",
"37.406.1",
"37.406.0",
"37.405.1",
"37.405.0",
"37.404.1",
"37.404.0",
"37.403.0",
"37.402.1",
"37.402.0",
"37.401.6",
"37.401.5",
"37.401.4",
"37.401.3",
"37.401.2",
"37.401.1",
"37.401.0",
"37.400.1",
"37.400.0",
"37.399.10",
"37.399.9",
"37.399.8",
"37.399.7",
"37.399.6",
"37.399.5",
"37.399.4",
"37.399.3",
"37.399.2",
"37.399.1",
"37.399.0",
"37.398.2",
"37.398.1",
"37.398.0",
"37.397.0",
"37.396.1",
"37.396.0",
"37.395.0",
"37.394.1",
"37.394.0",
"37.393.0",
"37.392.0",
"37.391.3",
"37.391.2",
"37.391.1",
"37.391.0",
"37.390.1",
"37.390.0",
"37.389.0",
"37.388.2",
"37.388.1",
"37.388.0",
"37.387.3",
"37.387.2",
"37.387.1",
"37.387.0",
"37.386.0",
"37.385.0",
"37.384.1",
"37.384.0",
"37.383.0",
"37.382.5",
"37.382.4",
"37.382.3",
"37.382.2",
"37.382.1",
"37.382.0",
"37.381.11",
"37.381.10",
"37.381.9",
"37.381.8",
"37.381.7",
"37.381.6",
"37.381.5",
"37.381.4",
"37.381.3",
"37.381.2",
"37.381.1",
"37.381.0",
"37.380.0",
"37.379.1",
"37.379.0",
"37.378.0",
"37.377.8",
"37.377.7",
"37.377.6",
"37.377.5",
"37.377.4",
"37.377.3",
"37.377.2",
"37.377.1",
"37.377.0",
"37.376.0",
"37.375.2",
"37.375.1",
"37.375.0",
"37.374.3",
"37.374.2",
"37.374.1",
"37.374.0",
"37.373.0",
"37.372.1",
"37.372.0",
"37.371.1",
"37.371.0",
"37.370.0",
"37.369.1",
"37.369.0",
"37.368.10",
"37.368.9",
"37.368.8",
"37.368.7",
"37.368.6",
"37.368.5",
"37.368.4",
"37.368.3",
"37.368.2",
"37.368.1",
"37.368.0",
"37.367.0",
"37.366.1",
"37.366.0",
"37.365.0",
"37.364.0",
"37.363.9",
"37.363.8",
"37.363.7",
"37.363.6",
"37.363.5",
"37.363.4",
"37.363.3",
"37.363.2",
"37.363.1",
"37.363.0",
"37.362.0",
"37.361.0",
"37.360.0",
"37.359.0",
"37.358.2",
"37.358.1",
"37.358.0",
"37.357.0",
"37.356.1",
"37.356.0",
"37.355.1",
"37.355.0",
"37.354.6",
"37.354.5",
"37.354.4",
"37.354.3",
"37.354.2",
"37.354.1",
"37.354.0",
"37.353.1",
"37.353.0",
"37.352.0",
"37.351.4",
"37.351.3",
"37.351.2",
"37.351.1",
"37.351.0",
"37.350.1",
"37.350.0",
"37.349.3",
"37.349.2",
"37.349.1",
"37.349.0",
"37.348.0",
"37.347.3",
"37.347.2",
"37.347.1",
"37.347.0",
"37.346.0",
"37.345.0",
"37.344.3",
"37.344.2",
"37.344.1",
"37.344.0",
"37.343.1",
"37.343.0",
"37.342.2",
"37.342.1",
"37.342.0",
"37.341.0",
"37.340.10",
"37.340.9",
"37.340.8",
"37.340.7",
"37.340.6",
"37.340.5",
"37.340.4",
"37.340.3",
"37.340.2",
"37.340.1",
"37.340.0",
"37.339.0",
"37.338.0",
"37.337.0",
"37.336.0",
"37.335.0",
"37.334.4",
"37.334.3",
"37.334.2",
"37.334.1",
"37.334.0",
"37.333.1",
"37.333.0",
"37.332.0",
"37.331.0",
"37.330.1",
"37.330.0",
"37.329.1",
"37.329.0",
"37.328.1",
"37.328.0",
"37.327.3",
"37.327.2",
"37.327.1",
"37.327.0",
"37.326.3",
"37.326.2",
"37.326.1",
"37.326.0",
"37.325.1",
"37.325.0",
"37.324.3",
"37.324.2",
"37.324.1",
"37.324.0",
"37.323.5",
"37.323.4",
"37.323.3",
"37.323.2",
"37.323.1",
"37.323.0",
"37.322.2",
"37.322.1",
"37.322.0",
"37.321.2",
"37.321.1",
"37.321.0",
"37.320.1",
"37.320.0",
"37.319.2",
"37.319.1",
"37.319.0",
"37.318.1",
"37.318.0",
"37.317.0",
"37.316.3",
"37.316.2",
"37.316.1",
"37.316.0",
"37.315.1",
"37.315.0",
"37.314.0",
"37.313.1",
"37.313.0",
"37.312.0",
"37.311.0",
"37.310.1",
"37.310.0",
"37.309.0",
"37.308.0",
"37.307.0",
"37.306.1",
"37.306.0",
"37.305.0",
"37.304.0",
"37.303.4",
"37.303.3",
"37.303.2",
"37.303.1",
"37.303.0",
"37.302.0",
"37.301.7",
"37.301.6",
"37.301.5",
"37.301.4",
"37.301.3",
"37.301.2",
"37.301.1",
"37.301.0",
"37.300.1",
"37.300.0",
"37.299.1",
"37.299.0",
"37.298.0",
"37.297.0",
"37.296.0",
"37.295.0",
"37.294.0",
"37.293.0",
"37.292.1",
"37.292.0",
"37.291.1",
"37.291.0",
"37.290.1",
"37.290.0",
"37.289.1",
"37.289.0",
"37.288.0",
"37.287.2",
"37.287.1",
"37.287.0",
"37.286.1",
"37.286.0",
"37.285.1",
"37.285.0",
"37.284.1",
"37.284.0",
"37.283.0",
"37.282.1",
"37.282.0",
"37.281.4",
"37.281.3",
"37.281.2",
"37.281.1",
"37.281.0",
"37.280.4",
"37.280.3",
"37.280.2",
"37.280.1",
"37.280.0",
"37.279.4",
"37.279.3",
"37.279.2",
"37.279.1",
"37.279.0",
"37.278.2",
"37.278.1",
"37.278.0",
"37.277.0",
"37.276.0",
"37.275.0",
"37.274.0",
"37.273.0",
"37.272.0",
"37.271.1",
"37.271.0",
"37.270.0",
"37.269.5",
"37.269.4",
"37.269.3",
"37.269.2",
"37.269.1",
"37.269.0",
"37.268.0",
"37.267.1",
"37.267.0",
"37.266.0",
"37.265.1",
"37.265.0",
"37.264.0",
"37.263.1",
"37.263.0",
"37.262.2",
"37.262.1",
"37.262.0",
"37.261.0",
"37.260.0",
"37.259.0",
"37.258.0",
"37.257.0",
"37.256.2",
"37.256.1",
"37.256.0",
"37.255.0",
"37.254.0",
"37.253.1",
"37.253.0",
"37.252.1",
"37.252.0",
"37.251.0",
"37.250.1",
"37.250.0",
"37.249.3",
"37.249.2",
"37.249.1",
"37.249.0",
"37.248.0",
"37.247.0",
"37.246.2",
"37.246.1",
"37.246.0",
"37.245.0",
"37.244.1",
"37.244.0",
"37.243.0",
"37.242.0",
"37.241.1",
"37.241.0",
"37.240.1",
"37.240.0",
"37.239.0",
"37.238.2",
"37.238.1",
"37.238.0",
"37.237.0",
"37.236.0",
"37.235.6",
"37.235.5",
"37.235.4",
"37.235.3",
"37.235.2",
"37.235.1",
"37.235.0",
"37.234.2",
"37.234.1",
"37.234.0",
"37.233.1",
"37.233.0",
"37.232.0",
"37.231.2",
"37.231.1",
"37.231.0",
"37.230.0",
"37.229.5",
"37.229.4",
"37.229.3",
"37.229.2",
"37.229.1",
"37.229.0",
"37.228.0",
"37.227.2",
"37.227.1",
"37.227.0",
"37.226.3",
"37.226.2",
"37.226.1",
"37.226.0",
"37.225.0",
"37.224.4",
"37.224.3",
"37.224.2",
"37.224.1",
"37.224.0",
"37.223.1",
"37.223.0",
"37.222.3",
"37.222.2",
"37.222.1",
"37.222.0",
"37.221.4",
"37.221.3",
"37.221.2",
"37.221.1",
"37.221.0",
"37.220.4",
"37.220.3",
"37.220.2",
"37.220.1",
"37.220.0",
"37.219.7",
"37.219.6",
"37.219.5",
"37.219.4",
"37.219.3",
"37.219.2",
"37.219.1",
"37.219.0",
"37.218.0",
"37.217.0",
"37.216.0",
"37.215.1",
"37.215.0",
"37.214.5",
"37.214.4",
"37.214.3",
"37.214.2",
"37.214.1",
"37.214.0",
"37.213.1",
"37.213.0",
"37.212.0",
"37.211.2",
"37.211.1",
"37.211.0",
"37.210.1",
"37.210.0",
"37.209.0",
"37.208.1",
"37.208.0",
"37.207.0",
"37.206.1",
"37.206.0",
"37.205.0",
"37.204.2",
"37.204.1",
"37.204.0",
"37.203.5",
"37.203.4",
"37.203.3",
"37.203.2",
"37.203.1",
"37.203.0",
"37.202.3",
"37.202.2",
"37.202.1",
"37.202.0",
"37.201.0",
"37.200.1",
"37.200.0",
"37.199.1",
"37.199.0",
"37.198.3",
"37.198.2",
"37.198.1",
"37.198.0",
"37.197.0",
"37.196.0",
"37.195.0",
"37.194.6",
"37.194.5",
"37.194.4",
"37.194.3",
"37.194.2",
"37.194.1",
"37.194.0",
"37.193.1",
"37.193.0",
"37.192.4",
"37.192.3",
"37.192.2",
"37.192.1",
"37.192.0",
"37.191.2",
"37.191.1",
"37.191.0",
"37.190.1",
"37.190.0",
"37.189.2",
"37.189.1",
"37.189.0",
"37.188.1",
"37.188.0",
"37.187.2",
"37.187.1",
"37.187.0",
"37.186.1",
"37.186.0",
"37.185.1",
"37.185.0",
"37.184.3",
"37.184.2",
"37.184.1",
"37.184.0",
"37.183.2",
"37.183.1",
"37.183.0",
"37.182.3",
"37.182.2",
"37.182.1",
"37.182.0",
"37.181.11",
"37.181.10",
"37.181.9",
"37.181.8",
"37.181.7",
"37.181.6",
"37.181.5",
"37.181.4",
"37.181.3",
"37.181.2",
"37.181.1",
"37.181.0",
"37.180.1",
"37.180.0",
"37.179.0",
"37.178.0",
"37.177.0",
"37.176.1",
"37.176.0",
"37.175.3",
"37.175.2",
"37.175.1",
"37.175.0",
"37.174.7",
"37.174.6",
"37.174.5",
"37.174.4",
"37.174.3",
"37.174.2",
"37.174.1",
"37.174.0",
"37.173.4",
"37.173.3",
"37.173.2",
"37.173.1",
"37.173.0",
"37.172.4",
"37.172.3",
"37.172.2",
"37.172.1",
"37.172.0",
"37.171.2",
"37.171.1",
"37.171.0",
"37.170.0",
"37.169.0",
"37.168.5",
"37.168.4",
"37.168.3",
"37.168.2",
"37.168.1",
"37.168.0",
"37.167.0",
"37.166.0",
"37.165.7",
"37.165.6",
"37.165.5",
"37.165.4",
"37.165.3",
"37.165.2",
"37.165.1",
"37.165.0",
"37.164.0",
"37.163.2",
"37.163.1",
"37.163.0",
"37.162.2",
"37.162.1",
"37.162.0",
"37.161.0",
"37.160.0",
"37.159.1",
"37.159.0",
"37.158.2",
"37.158.1",
"37.158.0",
"37.157.2",
"37.157.1",
"37.157.0",
"37.156.4",
"37.156.3",
"37.156.2",
"37.156.1",
"37.156.0",
"37.155.0",
"37.154.0",
"37.153.2",
"37.153.1",
"37.153.0",
"37.152.2",
"37.152.1",
"37.152.0",
"37.151.0",
"37.150.1",
"37.150.0",
"37.149.1",
"37.149.0",
"37.148.1",
"37.148.0",
"37.147.0",
"37.146.0",
"37.145.0",
"37.144.0",
"37.143.1",
"37.143.0",
"37.142.1",
"37.142.0",
"37.141.1",
"37.141.0",
"37.140.16",
"37.140.15",
"37.140.14",
"37.140.13",
"37.140.12",
"37.140.11",
"37.140.10",
"37.140.9",
"37.140.8",
"37.140.7",
"37.140.6",
"37.140.5",
"37.140.4",
"37.140.3",
"37.140.2",
"37.140.1",
"37.140.0",
"37.139.4",
"37.139.3",
"37.139.2",
"37.139.1",
"37.139.0",
"37.138.0",
"37.137.3",
"37.137.2",
"37.137.1",
"37.137.0",
"37.136.0",
"37.135.1",
"37.135.0",
"37.134.1",
"37.134.0",
"37.133.1",
"37.133.0",
"37.132.1",
"37.132.0",
"37.131.0",
"37.130.0",
"37.129.1",
"37.129.0",
"37.128.7",
"37.128.6",
"37.128.5",
"37.128.4",
"37.128.3",
"37.128.2",
"37.128.1",
"37.128.0",
"37.127.0",
"37.126.4",
"37.126.3",
"37.126.2",
"37.126.1",
"37.126.0",
"37.125.2",
"37.125.1",
"37.125.0",
"37.124.0",
"37.123.1",
"37.123.0",
"37.122.0",
"37.121.0",
"37.120.0",
"37.119.0",
"37.118.1",
"37.118.0",
"37.117.1",
"37.117.0",
"37.116.0",
"37.115.0",
"37.114.0",
"37.113.0",
"37.112.1",
"37.112.0",
"37.111.1",
"37.111.0",
"37.110.0",
"37.109.0",
"37.108.1",
"37.108.0",
"37.107.2",
"37.107.1",
"37.107.0",
"37.106.1",
"37.106.0",
"37.105.4",
"37.105.3",
"37.105.2",
"37.105.1",
"37.105.0",
"37.104.1",
"37.104.0",
"37.103.1",
"37.103.0",
"37.102.3",
"37.102.2",
"37.102.1",
"37.102.0",
"37.101.1",
"37.101.0",
"37.100.2",
"37.100.1",
"37.100.0",
"37.99.1",
"37.99.0",
"37.98.1",
"37.98.0",
"37.97.0",
"37.96.0",
"37.95.0",
"37.94.0",
"37.93.2",
"37.93.1",
"37.93.0",
"37.92.4",
"37.92.3",
"37.92.2",
"37.92.1",
"37.92.0",
"37.91.5",
"37.91.4",
"37.91.3",
"37.91.2",
"37.91.1",
"37.91.0",
"37.90.1",
"37.90.0",
"37.89.8",
"37.89.7",
"37.89.6",
"37.89.5",
"37.89.4",
"37.89.3",
"37.89.2",
"37.89.1",
"37.89.0",
"37.88.2",
"37.88.1",
"37.88.0",
"37.87.2",
"37.87.1",
"37.87.0",
"37.86.0",
"37.85.0",
"37.84.0",
"37.83.5",
"37.83.4",
"37.83.3",
"37.83.2",
"37.83.1",
"37.83.0",
"37.82.0",
"37.81.4",
"37.81.3",
"37.81.2",
"37.81.1",
"37.81.0",
"37.80.1",
"37.80.0",
"37.79.1",
"37.79.0",
"37.78.1",
"37.78.0",
"37.77.1",
"37.77.0",
"37.76.1",
"37.76.0",
"37.75.0",
"37.74.7",
"37.74.6",
"37.74.5",
"37.74.4",
"37.74.3",
"37.74.2",
"37.74.1",
"37.74.0",
"37.73.0",
"37.72.0",
"37.71.2",
"37.71.1",
"37.71.0",
"37.70.0",
"37.69.0",
"37.68.4",
"37.68.3",
"37.68.2",
"37.68.1",
"37.68.0",
"37.67.3",
"37.67.2",
"37.67.1",
"37.67.0",
"37.66.1",
"37.66.0",
"37.65.3",
"37.65.2",
"37.65.1",
"37.65.0",
"37.64.3",
"37.64.2",
"37.64.1",
"37.64.0",
"37.63.0",
"37.62.0",
"37.61.4",
"37.61.3",
"37.61.2",
"37.61.1",
"37.61.0",
"37.60.5",
"37.60.4",
"37.60.3",
"37.60.2",
"37.60.1",
"37.60.0",
"37.59.8",
"37.59.7",
"37.59.6",
"37.59.5",
"37.59.4",
"37.59.3",
"37.59.2",
"37.59.1",
"37.59.0",
"37.58.1",
"37.58.0",
"37.57.2",
"37.57.1",
"37.57.0",
"37.56.5",
"37.56.4",
"37.56.3",
"37.56.2",
"37.56.1",
"37.56.0",
"37.55.1",
"37.55.0",
"37.54.3",
"37.54.2",
"37.54.1",
"37.54.0",
"37.53.1",
"37.53.0",
"37.52.0",
"37.51.4",
"37.51.3",
"37.51.2",
"37.51.1",
"37.51.0",
"37.50.2",
"37.50.1",
"37.50.0",
"37.49.5",
"37.49.4",
"37.49.3",
"37.49.2",
"37.49.1",
"37.49.0",
"37.48.3",
"37.48.2",
"37.48.1",
"37.48.0",
"37.47.0",
"37.46.0",
"37.45.0",
"37.44.0",
"37.43.4",
"37.43.3",
"37.43.2",
"37.43.1",
"37.43.0",
"37.42.0",
"37.41.0",
"37.40.0",
"37.39.1",
"37.39.0",
"37.38.0",
"37.37.2",
"37.37.1",
"37.37.0",
"37.36.3",
"37.36.2",
"37.36.1",
"37.36.0",
"37.35.2",
"37.35.1",
"37.35.0",
"37.34.3",
"37.34.2",
"37.34.1",
"37.34.0",
"37.33.6",
"37.33.5",
"37.33.4",
"37.33.3",
"37.33.2",
"37.33.1",
"37.33.0",
"37.32.1",
"37.32.0",
"37.31.7",
"37.31.6",
"37.31.5",
"37.31.4",
"37.31.3",
"37.31.2",
"37.31.1",
"37.31.0",
"37.30.0",
"37.29.0",
"37.28.1",
"37.28.0",
"37.27.1",
"37.27.0",
"37.26.4",
"37.26.3",
"37.26.2",
"37.26.1",
"37.26.0",
"37.25.0",
"37.24.0",
"37.23.0",
"37.22.0",
"37.21.0",
"37.20.2",
"37.20.1",
"37.20.0",
"37.19.3",
"37.19.2",
"37.19.1",
"37.19.0",
"37.18.5",
"37.18.4",
"37.18.3",
"37.18.2",
"37.18.1",
"37.18.0",
"37.17.1",
"37.17.0",
"37.16.0",
"37.15.0",
"37.14.0",
"37.13.7",
"37.13.6",
"37.13.5",
"37.13.4",
"37.13.3",
"37.13.2",
"37.13.1",
"37.13.0",
"37.12.1",
"37.12.0",
"37.11.1",
"37.11.0",
"37.10.0",
"37.9.1",
"37.9.0",
"37.8.1",
"37.8.0",
"37.7.1",
"37.7.0",
"37.6.3",
"37.6.2",
"37.6.1",
"37.6.0",
"37.5.4",
"37.5.3",
"37.5.2",
"37.5.1",
"37.5.0",
"37.4.1",
"37.4.0",
"37.3.3",
"37.3.2",
"37.3.1",
"37.3.0",
"37.2.0",
"37.1.6",
"37.1.5",
"37.1.4",
"37.1.3",
"37.1.2",
"37.1.1",
"37.1.0",
"37.0.5",
"37.0.4",
"37.0.3",
"37.0.2",
"37.0.1",
"37.0.0",
"36.109.4",
"36.109.3",
"36.109.2",
"36.109.1",
"36.109.0",
"36.108.1",
"36.108.0",
"36.107.3",
"36.107.2",
"36.107.1",
"36.107.0",
"36.106.2",
"36.106.1",
"36.106.0",
"36.105.0",
"36.104.0",
"36.103.0",
"36.102.1",
"36.102.0",
"36.101.0",
"36.100.0",
"36.99.0",
"36.98.0",
"36.97.3",
"36.97.2",
"36.97.1",
"36.97.0",
"36.96.8",
"36.96.7",
"36.96.6",
"36.96.5",
"36.96.4",
"36.96.3",
"36.96.2",
"36.96.1",
"36.96.0",
"36.95.0",
"36.94.6",
"36.94.5",
"36.94.4",
"36.94.3",
"36.94.2",
"36.94.1",
"36.94.0",
"36.93.7",
"36.93.6",
"36.93.5",
"36.93.4",
"36.93.3",
"36.93.2",
"36.93.1",
"36.93.0",
"36.92.1",
"36.92.0",
"36.91.0",
"36.90.0",
"36.89.0",
"36.88.2",
"36.88.1",
"36.88.0",
"36.87.7",
"36.87.6",
"36.87.5",
"36.87.4",
"36.87.3",
"36.87.2",
"36.87.1",
"36.87.0",
"36.86.0",
"36.85.1",
"36.85.0",
"36.84.0",
"36.83.1",
"36.83.0",
"36.82.0",
"36.81.0",
"36.80.0",
"36.79.1",
"36.79.0",
"36.78.8",
"36.78.7",
"36.78.6",
"36.78.5",
"36.78.4",
"36.78.3",
"36.78.2",
"36.78.1",
"36.78.0",
"36.77.0",
"36.76.0",
"36.75.0",
"36.74.4",
"36.74.3",
"36.74.2",
"36.74.1",
"36.74.0",
"36.73.0",
"36.72.2",
"36.72.1",
"36.72.0",
"36.71.1",
"36.71.0",
"36.70.0",
"36.69.0",
"36.68.1",
"36.68.0",
"36.67.1",
"36.67.0",
"36.66.0",
"36.65.1",
"36.65.0",
"36.64.9",
"36.64.8",
"36.64.7",
"36.64.6",
"36.64.5",
"36.64.4",
"36.64.3",
"36.64.2",
"36.64.1",
"36.64.0",
"36.63.0",
"36.62.0",
"36.61.0",
"36.60.2",
"36.60.1",
"36.60.0",
"36.59.0",
"36.58.1",
"36.58.0",
"36.57.11",
"36.57.10",
"36.57.9",
"36.57.8",
"36.57.7",
"36.57.6",
"36.57.5",
"36.57.4",
"36.57.3",
"36.57.2",
"36.57.1",
"36.57.0",
"36.56.3",
"36.56.2",
"36.56.1",
"36.56.0",
"36.55.1",
"36.55.0",
"36.54.3",
"36.54.2",
"36.54.1",
"36.54.0",
"36.53.1",
"36.53.0",
"36.52.4",
"36.52.3",
"36.52.2",
"36.52.1",
"36.52.0",
"36.51.3",
"36.51.2",
"36.51.1",
"36.51.0",
"36.50.0",
"36.49.0",
"36.48.0",
"36.47.0",
"36.46.2",
"36.46.1",
"36.46.0",
"36.45.0",
"36.44.1",
"36.44.0",
"36.43.2",
"36.43.1",
"36.43.0",
"36.42.4",
"36.42.3",
"36.42.2",
"36.42.1",
"36.42.0",
"36.41.0",
"36.40.6",
"36.40.5",
"36.40.4",
"36.40.3",
"36.40.2",
"36.40.1",
"36.40.0",
"36.39.0",
"36.38.1",
"36.38.0",
"36.37.2",
"36.37.1",
"36.37.0",
"36.36.1",
"36.36.0",
"36.35.1",
"36.35.0",
"36.34.0",
"36.33.5",
"36.33.4",
"36.33.3",
"36.33.2",
"36.33.1",
"36.33.0",
"36.32.0",
"36.31.0",
"36.30.1",
"36.30.0",
"36.29.2",
"36.29.1",
"36.29.0",
"36.28.0",
"36.27.2",
"36.27.1",
"36.27.0",
"36.26.1",
"36.26.0",
"36.25.5",
"36.25.4",
"36.25.3",
"36.25.2",
"36.25.1",
"36.25.0",
"36.24.4",
"36.24.3",
"36.24.2",
"36.24.1",
"36.24.0",
"36.23.2",
"36.23.1",
"36.23.0",
"36.22.0",
"36.21.1",
"36.21.0",
"36.20.1",
"36.20.0",
"36.19.2",
"36.19.1",
"36.19.0",
"36.18.4",
"36.18.3",
"36.18.2",
"36.18.1",
"36.18.0",
"36.17.0",
"36.16.0",
"36.15.0",
"36.14.0",
"36.13.2",
"36.13.1",
"36.13.0",
"36.12.0",
"36.11.0",
"36.10.1",
"36.10.0",
"36.9.2",
"36.9.1",
"36.9.0",
"36.8.12",
"36.8.11",
"36.8.10",
"36.8.9",
"36.8.8",
"36.8.7",
"36.8.6",
"36.8.5",
"36.8.4",
"36.8.3",
"36.8.2",
"36.8.1",
"36.8.0",
"36.7.7",
"36.7.6",
"36.7.5",
"36.7.4",
"36.7.3",
"36.7.2",
"36.7.1",
"36.7.0",
"36.6.1",
"36.6.0",
"36.5.3",
"36.5.2",
"36.5.1",
"36.5.0",
"36.4.1",
"36.4.0",
"36.3.0",
"36.2.1",
"36.2.0",
"36.1.16",
"36.1.15",
"36.1.14",
"36.1.13",
"36.1.12",
"36.1.11",
"36.1.10",
"36.1.9",
"36.1.8",
"36.1.7",
"36.1.6",
"36.1.5",
"36.1.4",
"36.1.3",
"36.1.2",
"36.1.1",
"36.1.0",
"36.0.3",
"36.0.2",
"36.0.1",
"36.0.0",
"35.159.5",
"35.159.4",
"35.159.3",
"35.159.2",
"35.159.1",
"35.159.0",
"35.158.0",
"35.157.1",
"35.157.0",
"35.156.0",
"35.155.0",
"35.154.0",
"35.153.0",
"35.152.0",
"35.151.1",
"35.151.0",
"35.150.0",
"35.149.0",
"35.148.0",
"35.147.0",
"35.146.1",
"35.146.0",
"35.145.0",
"35.144.3",
"35.144.2",
"35.144.1",
"35.144.0",
"35.143.3",
"35.143.2",
"35.143.1",
"35.143.0",
"35.142.0",
"35.141.4",
"35.141.3",
"35.141.2",
"35.141.1",
"35.141.0",
"35.140.3",
"35.140.2",
"35.140.1",
"35.140.0",
"35.139.1",
"35.139.0",
"35.138.2",
"35.138.1",
"35.138.0",
"35.137.0",
"35.136.0",
"35.135.0",
"35.134.1",
"35.134.0",
"35.133.3",
"35.133.2",
"35.133.1",
"35.133.0",
"35.132.0",
"35.131.0",
"35.130.0",
"35.129.0",
"35.128.1",
"35.128.0",
"35.127.1",
"35.127.0",
"35.126.0",
"35.125.0",
"35.124.4",
"35.124.3",
"35.124.2",
"35.124.1",
"35.124.0",
"35.123.0",
"35.122.0",
"35.121.0",
"35.120.0",
"35.119.2",
"35.119.1",
"35.119.0",
"35.118.1",
"35.118.0",
"35.117.4",
"35.117.3",
"35.117.2",
"35.117.1",
"35.117.0",
"35.116.6",
"35.116.5",
"35.116.4",
"35.116.3",
"35.116.2",
"35.116.1",
"35.116.0",
"35.115.2",
"35.115.1",
"35.115.0",
"35.114.3",
"35.114.2",
"35.114.1",
"35.114.0",
"35.113.3",
"35.113.2",
"35.113.1",
"35.113.0",
"35.112.1",
"35.112.0",
"35.111.0",
"35.110.2",
"35.110.1",
"35.110.0",
"35.109.0",
"35.108.0",
"35.107.0",
"35.106.1",
"35.106.0",
"35.105.5",
"35.105.4",
"35.105.3",
"35.105.2",
"35.105.1",
"35.105.0",
"35.104.0",
"35.103.0",
"35.102.10",
"35.102.9",
"35.102.8",
"35.102.7",
"35.102.6",
"35.102.5",
"35.102.4",
"35.102.3",
"35.102.2",
"35.102.1",
"35.102.0",
"35.101.0",
"35.100.3",
"35.100.2",
"35.100.1",
"35.100.0",
"35.99.0",
"35.98.8",
"35.98.7",
"35.98.6",
"35.98.5",
"35.98.4",
"35.98.3",
"35.98.2",
"35.98.1",
"35.98.0",
"35.97.1",
"35.97.0",
"35.96.3",
"35.96.2",
"35.96.1",
"35.96.0",
"35.95.1",
"35.95.0",
"35.94.1",
"35.94.0",
"35.93.0",
"35.92.0",
"35.91.1",
"35.91.0",
"35.90.0",
"35.89.1",
"35.89.0",
"35.88.0",
"35.87.3",
"35.87.2",
"35.87.1",
"35.87.0",
"35.86.2",
"35.86.1",
"35.86.0",
"35.85.0",
"35.84.1",
"35.84.0",
"35.83.0",
"35.82.0",
"35.81.0",
"35.80.2",
"35.80.1",
"35.80.0",
"35.79.1",
"35.79.0",
"35.78.0",
"35.77.0",
"35.76.0",
"35.75.0",
"35.74.1",
"35.74.0",
"35.73.2",
"35.73.1",
"35.73.0",
"35.72.1",
"35.72.0",
"35.71.7",
"35.71.6",
"35.71.5",
"35.71.4",
"35.71.3",
"35.71.2",
"35.71.1",
"35.71.0",
"35.70.0",
"35.69.5",
"35.69.4",
"35.69.3",
"35.69.2",
"35.69.1",
"35.69.0",
"35.68.0",
"35.67.1",
"35.67.0",
"35.66.3",
"35.66.2",
"35.66.1",
"35.66.0",
"35.65.1",
"35.65.0",
"35.64.0",
"35.63.2",
"35.63.1",
"35.63.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-76230.json"
}
}
],
"modified": "2026-10-28T02:30:41.589624141Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76230.json",
"https://github.com/renovatebot/renovate/security/advisories/GHSA-fr4j-65pv-gjjj",
"https://nvd.nist.gov/vuln/detail/CVE-2026-76230",
"https://www.vulncheck.com/advisories/renovate-before-command-injection-via-npm",
"https://github.com/renovatebot/renovate/commit/012c0ac2fe32832e60a62bde405c0a241efd314c",
"https://github.com/renovatebot/renovate/commit/a70a6a376d31148e80be5a5c885ac33ff5ddb30c"
],
"provider_metadata": {
"cwe_ids": [
"CWE-77"
],
"cna_assigner": "VulnCheck",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76230.json"
}
},
"related_cves": [
{
"value": "CVE-2026-76230",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 509052,
"published_at": "2026-08-19T14:02:11.62+00:00"
}