RE
Vendor
renovatebot
25
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110868 | RE renovate renovatebot | 8.5 | Oct 14 | Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources |
| CVE-2026-110867 | RE renovate renovatebot | 8.5 | Oct 14 | Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset |
| CVE-2026-110866 | RE renovate renovatebot | 4.7 | Oct 14 | Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request |
| CVE-2026-110865 | RE renovate renovatebot | 7.1 | Oct 14 | Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets |
| CVE-2026-88889 | RE renovate renovatebot | 7.8 | Sep 10 | Renovate before 44.14.7 Command Injection via distributionType |
| CVE-2026-88888 | RE renovate renovatebot | 7.0 | Sep 10 | Renovate before 44.14.7 Command Injection via Mix organization |
| CVE-2026-88887 | RE renovate renovatebot | 8.6 | Sep 10 | Renovate before 44.11.2 Credential Exfiltration via Link Header |
| CVE-2026-88886 | RE renovate renovatebot | 7.8 | Sep 10 | Renovate before 44.14.7 Command Injection via gradle-wrapper |
| CVE-2026-88885 | RE renovate renovatebot | 7.0 | Sep 10 | Renovate before 44.14.7 Command Injection via depName |
| CVE-2026-88884 | RE renovate renovatebot | 5.8 | Sep 10 | Renovate before 44.3.1 Authentication Bypass via Digest Updates |
| CVE-2026-88883 | RE renovate renovatebot | 7.7 | Sep 10 | Renovate before 44.14.4 TLS Private Key Log Sanitisation |
| CVE-2026-88882 | RE renovate renovatebot | 8.6 | Sep 10 | Renovate before 44.11.2 Credential Exfiltration via Link Header |
| CVE-2026-88881 | RE renovate renovatebot | 8.6 | Sep 10 | Renovate before 44.11.3 Credential Exfiltration via Link Header |
| CVE-2026-88880 | RE renovate renovatebot | 8.6 | Sep 10 | Renovate before 44.11.3 Credential Exfiltration via Link Header |
| CVE-2026-76233 | RE renovate renovatebot | 6.7 | Aug 19 | Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager |
| CVE-2026-76232 | RE renovate renovatebot | 6.7 | Aug 19 | Renovate 31.51.0 before 40.33.0 Command Injection via helmv3 |
| CVE-2026-76231 | RE renovate renovatebot | 6.7 | Aug 19 | Renovate 32.135.0 before 40.33.0 Command Injection via hermit |
| CVE-2026-76230 | RE renovate renovatebot | 6.7 | Aug 19 | Renovate 35.63.0 before 40.33.0 Command Injection via npm |
| CVE-2026-76229 | RE renovate renovatebot | 6.7 | Aug 19 | Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize |
| CVE-2026-76228 | RE renovate renovatebot | 6.7 | Aug 19 | Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper |
| CVE-2026-76227 | RE renovate renovatebot | 5.5 | Aug 19 | Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure |
| CVE-2026-76226 | RE renovate renovatebot | 6.3 | Aug 19 | Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance |
| CVE-2024-58376 | RE renovate renovatebot | 6.7 | Aug 19 | Renovate 37.158.0 before 37.199.0 Command Injection via helmv3 |
| CVE-2020-37267 | RE renovate renovatebot | 7.5 | Aug 19 | Renovate 19.180.0 before 23.25.1 Token Leakage via Logs |
| CVE-2019-25766 | RE renovate renovatebot | 7.5 | Aug 19 | Renovate before 19.38.7 Credential Exposure via Go Modules |