mend

Products

ProductCVEsExploitedLatest
renovate-ee-server16–Oct 14, 2026
renovate-ee-worker16–Oct 14, 2026
renovate-ce16–Oct 14, 2026
mend-renovate-enterprise-edition10–Sep 10, 2026
mend-renovate-ce10–Sep 10, 2026
mend-renovate-enterprise-edition helm chart4–Oct 14, 2026
mend-renovate-ce helm chart4–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-110868 High 8.5 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
  • CVE-2026-110868 High 8.5 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
  • CVE-2026-110868 High 8.5 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
  • CVE-2026-110868 High 8.5 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
  • CVE-2026-110868 High 8.5 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
  • CVE-2026-110867 High 8.5 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
  • CVE-2026-110867 High 8.5 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
  • CVE-2026-110867 High 8.5 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
  • CVE-2026-110867 High 8.5 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
  • CVE-2026-110867 High 8.5 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
  • CVE-2026-110866 Medium 4.7 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
  • CVE-2026-110866 Medium 4.7 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
  • CVE-2026-110866 Medium 4.7 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
  • CVE-2026-110866 Medium 4.7 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
  • CVE-2026-110866 Medium 4.7 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
  • CVE-2026-110865 High 7.1 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
  • CVE-2026-110865 High 7.1 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
  • CVE-2026-110865 High 7.1 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
  • CVE-2026-110865 High 7.1 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
  • CVE-2026-110865 High 7.1 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
  • CVE-2026-88889 High 7.8 Renovate before 44.14.7 Command Injection via distributionType 1.0%
  • CVE-2026-88889 High 7.8 Renovate before 44.14.7 Command Injection via distributionType 1.0%
  • CVE-2026-88889 High 7.8 Renovate before 44.14.7 Command Injection via distributionType 1.0%
  • CVE-2026-88889 High 7.8 Renovate before 44.14.7 Command Injection via distributionType 1.0%
  • CVE-2026-88889 High 7.8 Renovate before 44.14.7 Command Injection via distributionType 1.0%
  • CVE-2026-88888 High 7.0 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
  • CVE-2026-88888 High 7.0 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
  • CVE-2026-88888 High 7.0 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
  • CVE-2026-88888 High 7.0 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
  • CVE-2026-88888 High 7.0 Renovate before 44.14.7 Command Injection via Mix organization 0.9%