RE
Product
renovate-ee-server
16
CVEs
0
On KEV
8.6
Max CVSS
4
New 30D
Severity mix
Critical 0High 12Medium 4Low 0
Watch
Add renovate-ee-server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88887 | 8.6 | Sep 10 | Renovate before 44.11.2 Credential Exfiltration via Link Header Affected: before 15.4.0 |
| CVE-2026-88882 | 8.6 | Sep 10 | Renovate before 44.11.2 Credential Exfiltration via Link Header Affected: before 15.4.0 |
| CVE-2026-88881 | 8.6 | Sep 10 | Renovate before 44.11.3 Credential Exfiltration via Link Header Affected: before 15.4.0 |
| CVE-2026-88880 | 8.6 | Sep 10 | Renovate before 44.11.3 Credential Exfiltration via Link Header Affected: before 15.4.0 |
| CVE-2026-110868 | 8.5 | Oct 14 | Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources Affected: before 15.6.0 |
| CVE-2026-110867 | 8.5 | Oct 14 | Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset Affected: before 15.5.0 |
| CVE-2026-88889 | 7.8 | Sep 10 | Renovate before 44.14.7 Command Injection via distributionType Affected: before 15.4.0 |
| CVE-2026-88886 | 7.8 | Sep 10 | Renovate before 44.14.7 Command Injection via gradle-wrapper Affected: before 15.4.0 |
| CVE-2026-88883 | 7.7 | Sep 10 | Renovate before 44.14.4 TLS Private Key Log Sanitisation Affected: before 15.4.0 |
| CVE-2026-110865 | 7.1 | Oct 14 | Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets Affected: before 15.5.0 |
| CVE-2026-88888 | 7.0 | Sep 10 | Renovate before 44.14.7 Command Injection via Mix organization Affected: before 15.4.0 |
| CVE-2026-88885 | 7.0 | Sep 10 | Renovate before 44.14.7 Command Injection via depName Affected: before 15.4.0 |
Showing 12