Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/19 2:02 p.m.10 views

CVE-2026-76233 Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager

Renovate versions from 39.53.0 before 40.33.0 contain a command injection vulnerability in the gleam manager where the depName parameter is appended to gleam deps update commands without proper sanitization. Attackers with repository write access can craft malicious gleam.toml files to execute...

8.4CVSS6AI score
SaveExploits0References5
Rows per page
Query Builder