Renovate 37.158.0 before 37.199.0 Command Injection via helmv3

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2024-58376 · Microsoft / collected KEV context

EUVD-2024-55728

GHSA-7vwx-mgm6-w2m7

GHSA-rqgv-292v-5qgr

cve-program · CVE-2024-58376

• https://github.com/renovatebot/renovate/security/advisories/GHSA-rqgv-292v-5qgr
• https://www.vulncheck.com/advisories/renovate-before-command-injection-via-helmv3

euvd · EUVD-2024-55728

• https://github.com/renovatebot/renovate/security/advisories/GHSA-rqgv-292v-5qgr
• https://www.vulncheck.com/advisories/renovate-before-command-injection-via-helmv3

nvd · CVE-2024-58376

• https://github.com/renovatebot/renovate/security/advisories/GHSA-rqgv-292v-5qgr
• https://www.vulncheck.com/advisories/renovate-before-command-injection-via-helmv3

osv · GHSA-rqgv-292v-5qgr

• https://github.com/renovatebot/renovate/security/advisories/GHSA-rqgv-292v-5qgr
• https://github.com/renovatebot/renovate/commit/1e941fd885c799f2d38f4084a6f4cb9438813c8f
• https://github.com/renovatebot/renovate
• https://github.com/renovatebot/renovate/blob/23f3df6216375cb5bcfe027b0faee304f877f891/lib/modules/manager/helmv3/artifacts.ts#L80

No related operational record is retained in the current change model.