Command Injection

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Command Injection in the gomod manager when processing unescaped depName parameters in import-path update commands with binarySource=docker mode. An attacker can execute arbitrary commands as the...