ME
Product
mend-renovate-ce
10
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 1Low 0
Watch
Add mend-renovate-ce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88887 | 8.6 | Sep 10 | Renovate before 44.11.2 Credential Exfiltration via Link Header Affected: before 15.4.0 |
| CVE-2026-88882 | 8.6 | Sep 10 | Renovate before 44.11.2 Credential Exfiltration via Link Header Affected: before 15.4.0 |
| CVE-2026-88881 | 8.6 | Sep 10 | Renovate before 44.11.3 Credential Exfiltration via Link Header Affected: before 15.4.0 |
| CVE-2026-88880 | 8.6 | Sep 10 | Renovate before 44.11.3 Credential Exfiltration via Link Header Affected: before 15.4.0 |
| CVE-2026-88889 | 7.8 | Sep 10 | Renovate before 44.14.7 Command Injection via distributionType Affected: before 15.4.0 |
| CVE-2026-88886 | 7.8 | Sep 10 | Renovate before 44.14.7 Command Injection via gradle-wrapper Affected: before 15.4.0 |
| CVE-2026-88883 | 7.7 | Sep 10 | Renovate before 44.14.4 TLS Private Key Log Sanitisation Affected: before 15.4.0 |
| CVE-2026-88888 | 7.0 | Sep 10 | Renovate before 44.14.7 Command Injection via Mix organization Affected: before 15.4.0 |
| CVE-2026-88885 | 7.0 | Sep 10 | Renovate before 44.14.7 Command Injection via depName Affected: before 15.4.0 |
| CVE-2026-88884 | 5.8 | Sep 10 | Renovate before 44.3.1 Authentication Bypass via Digest Updates Affected: before 15.4.0 |
Showing 10
