renovate-ee-server vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RE

Product

renovate-ee-server

by mend · last CVE Oct 14, 2026

16

CVEs

0

On KEV

8.6

Max CVSS

4

New 30D

Vulnerabilities16 In the news0 Timeline

Severity mix

Critical 0High 12Medium 4Low 0

Severity

All severities16 Critical0 High12 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add renovate-ee-server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-88887	8.6	0%	Sep 10	Renovate before 44.11.2 Credential Exfiltration via Link Header Affected: before 15.4.0
CVE-2026-88882	8.6	0%	Sep 10	Renovate before 44.11.2 Credential Exfiltration via Link Header Affected: before 15.4.0
CVE-2026-88881	8.6	0%	Sep 10	Renovate before 44.11.3 Credential Exfiltration via Link Header Affected: before 15.4.0
CVE-2026-88880	8.6	1%	Sep 10	Renovate before 44.11.3 Credential Exfiltration via Link Header Affected: before 15.4.0
CVE-2026-110868	8.5	0%	Oct 14	Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources Affected: before 15.6.0
CVE-2026-110867	8.5	0%	Oct 14	Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset Affected: before 15.5.0
CVE-2026-88889	7.8	1%	Sep 10	Renovate before 44.14.7 Command Injection via distributionType Affected: before 15.4.0
CVE-2026-88886	7.8	0%	Sep 10	Renovate before 44.14.7 Command Injection via gradle-wrapper Affected: before 15.4.0
CVE-2026-88883	7.7	0%	Sep 10	Renovate before 44.14.4 TLS Private Key Log Sanitisation Affected: before 15.4.0
CVE-2026-110865	7.1	0%	Oct 14	Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets Affected: before 15.5.0
CVE-2026-88888	7.0	1%	Sep 10	Renovate before 44.14.7 Command Injection via Mix organization Affected: before 15.4.0
CVE-2026-88885	7.0	1%	Sep 10	Renovate before 44.14.7 Command Injection via depName Affected: before 15.4.0
CVE-2026-76228	6.7	1%	Aug 19	Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper Affected: before 13.3.0
CVE-2026-88884	5.8	0%	Sep 10	Renovate before 44.3.1 Authentication Bypass via Digest Updates Affected: before 15.4.0
CVE-2026-76227	5.5	0%	Aug 19	Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure Affected: 13.3.0 before 13.6.0
CVE-2026-110866	4.7	0%	Oct 14	Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request Affected: before 15.5.0