Security Advisory

CVE-2026-76226

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 14:02:08

Last updated 2026-08-21 11:21:07

Assigner VulnCheck

CVSS score 6.8

State PUBLISHED

Description

Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerability in bazel-module and bazelisk managers when using lockFileMaintenance. Attackers can execute arbitrary code by providing malicious dependencies that are referenced in bazel mod deps calls, such as within ctx.execute statements.

← Browse all CVEs View on cve.org ↗