Arbitrary Command Injection

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Arbitrary Command Injection due to the improper sanitazation of user-supplied packageName in the generateLockFile function of npm manager. An attacker can execute arbitrary commands on the host system b...