mend
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| renovate-ee-server | 16 | – | Oct 14, 2026 |
| renovate-ee-worker | 16 | – | Oct 14, 2026 |
| renovate-ce | 16 | – | Oct 14, 2026 |
| mend-renovate-enterprise-edition | 10 | – | Sep 10, 2026 |
| mend-renovate-ce | 10 | – | Sep 10, 2026 |
| mend-renovate-enterprise-edition helm chart | 4 | – | Oct 14, 2026 |
| mend-renovate-ce helm chart | 4 | – | Oct 14, 2026 |
Exploited and recent CVEs
- CVE-2026-110868 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
- CVE-2026-110868 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
- CVE-2026-110868 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
- CVE-2026-110868 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
- CVE-2026-110868 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
- CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
- CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
- CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
- CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
- CVE-2026-110867 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
- CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
- CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
- CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
- CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
- CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
- CVE-2026-110865 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
- CVE-2026-110865 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
- CVE-2026-110865 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
- CVE-2026-110865 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
- CVE-2026-110865 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
- CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType 1.0%
- CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType 1.0%
- CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType 1.0%
- CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType 1.0%
- CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType 1.0%
- CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
- CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
- CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
- CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
- CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization 0.9%