Login Request a demo
RE
Product
renovate
by renovatebot · last CVE Oct 14, 2026
25
CVEs
0
On KEV
8.6
Max CVSS
4
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 0High 14Medium 11Low 0
Severity
All severities25Critical0High14Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add renovate to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76233
6.7
1%
Aug 19
Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager
Affected: 39.53.0 before 40.33.0
CVE-2026-76232
6.7
1%
Aug 19
Renovate 31.51.0 before 40.33.0 Command Injection via helmv3
Affected: 31.51.0 before 40.33.0
CVE-2026-76231
6.7
1%
Aug 19
Renovate 32.135.0 before 40.33.0 Command Injection via hermit
Affected: 32.135.0 before 40.33.0
CVE-2026-76230
6.7
1%
Aug 19
Renovate 35.63.0 before 40.33.0 Command Injection via npm
Affected: 35.63.0 before 40.33.0
CVE-2026-76229
6.7
1%
Aug 19
Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize
Affected: 39.218.0 before 40.33.0
CVE-2026-76228
6.7
1%
Aug 19
Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper
Affected: 32.124.0 before 42.68.5
CVE-2024-58376
6.7
1%
Aug 19
Renovate 37.158.0 before 37.199.0 Command Injection via helmv3
Affected: 37.158.0 before 37.199.0
CVE-2026-76226
6.3
0%
Aug 19
Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance
Affected: 43.65.0 before 43.102.11
CVE-2026-88884
5.8
0%
Sep 10
Renovate before 44.3.1 Authentication Bypass via Digest Updates
Affected: before 44.3.1
CVE-2026-76227
5.5
0%
Aug 19
Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure
Affected: 42.68.1 before 42.96.3; 43.0.0 before 43.4.4
CVE-2026-110866
4.7
0%
Oct 14
Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request
Affected: before 44.61.3
Showing 11