Renovate 37.158.0 before 37.199.0 Command Injection via helmv3

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2024-58376 · CVE overview and exploitation status

EUVD-2024-55728

GHSA-7vwx-mgm6-w2m7

GHSA-rqgv-292v-5qgr

cve-program · CVE-2024-58376

• https://github.com/renovatebot/renovate/security/advisories/GHSA-rqgv-292v-5qgr
• https://www.vulncheck.com/advisories/renovate-before-command-injection-via-helmv3

euvd · EUVD-2024-55728

• https://github.com/renovatebot/renovate/security/advisories/GHSA-rqgv-292v-5qgr
• https://www.vulncheck.com/advisories/renovate-before-command-injection-via-helmv3

nvd · CVE-2024-58376

• https://github.com/renovatebot/renovate/security/advisories/GHSA-rqgv-292v-5qgr
• https://www.vulncheck.com/advisories/renovate-before-command-injection-via-helmv3

osv · GHSA-rqgv-292v-5qgr

• https://github.com/renovatebot/renovate/security/advisories/GHSA-rqgv-292v-5qgr
• https://github.com/renovatebot/renovate/commit/1e941fd885c799f2d38f4084a6f4cb9438813c8f
• https://github.com/renovatebot/renovate
• https://github.com/renovatebot/renovate/blob/23f3df6216375cb5bcfe027b0faee304f877f891/lib/modules/manager/helmv3/artifacts.ts#L80

No related changes are available here.