RE
Product
renovate
25
CVEs
0
On KEV
8.6
Max CVSS
4
New 30D
Severity mix
Critical 0High 14Medium 11Low 0
Watch
Add renovate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88887 | 8.6 | Sep 10 | Renovate before 44.11.2 Credential Exfiltration via Link Header Affected: before 44.11.2 |
| CVE-2026-88882 | 8.6 | Sep 10 | Renovate before 44.11.2 Credential Exfiltration via Link Header Affected: before 44.11.2 |
| CVE-2026-88881 | 8.6 | Sep 10 | Renovate before 44.11.3 Credential Exfiltration via Link Header Affected: before 44.11.3 |
| CVE-2026-88880 | 8.6 | Sep 10 | Renovate before 44.11.3 Credential Exfiltration via Link Header Affected: before 44.11.3 |
| CVE-2026-110868 | 8.5 | Oct 14 | Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources Affected: before 44.79.0 |
| CVE-2026-110867 | 8.5 | Oct 14 | Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset Affected: before 44.60.1 |
| CVE-2026-88889 | 7.8 | Sep 10 | Renovate before 44.14.7 Command Injection via distributionType Affected: before 44.14.7 |
| CVE-2026-88886 | 7.8 | Sep 10 | Renovate before 44.14.7 Command Injection via gradle-wrapper Affected: before 44.14.7 |
| CVE-2026-88883 | 7.7 | Sep 10 | Renovate before 44.14.4 TLS Private Key Log Sanitisation Affected: before 44.14.4 |
| CVE-2020-37267 | 7.5 | Aug 19 | Renovate 19.180.0 before 23.25.1 Token Leakage via Logs Affected: 19.180.0 before 23.25.1 |
| CVE-2019-25766 | 7.5 | Aug 19 | Renovate before 19.38.7 Credential Exposure via Go Modules Affected: 13.87.0 before 19.38.7 |
| CVE-2026-110865 | 7.1 | Oct 14 | Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets Affected: before 44.60.1 |
| CVE-2026-88888 | 7.0 | Sep 10 | Renovate before 44.14.7 Command Injection via Mix organization Affected: before 44.14.7 |
| CVE-2026-88885 | 7.0 | Sep 10 | Renovate before 44.14.7 Command Injection via depName Affected: before 44.14.7 |
Showing 14