mend renovate-ce

• CVE-2026-110868 High 8.5 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
• CVE-2026-110867 High 8.5 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
• CVE-2026-110866 Medium 4.7 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
• CVE-2026-110865 High 7.1 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
• CVE-2026-88889 High 7.8 Renovate before 44.14.7 Command Injection via distributionType 1.0%
• CVE-2026-88888 High 7.0 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
• CVE-2026-88887 High 8.6 Renovate before 44.11.2 Credential Exfiltration via Link Header 0.4%
• CVE-2026-88886 High 7.8 Renovate before 44.14.7 Command Injection via gradle-wrapper 0.2%
• CVE-2026-88885 High 7.0 Renovate before 44.14.7 Command Injection via depName 0.9%
• CVE-2026-88884 Medium 5.8 Renovate before 44.3.1 Authentication Bypass via Digest Updates 0.3%
• CVE-2026-88883 High 7.7 Renovate before 44.14.4 TLS Private Key Log Sanitisation 0.4%
• CVE-2026-88882 High 8.6 Renovate before 44.11.2 Credential Exfiltration via Link Header 0.4%
• CVE-2026-88881 High 8.6 Renovate before 44.11.3 Credential Exfiltration via Link Header 0.4%
• CVE-2026-88880 High 8.6 Renovate before 44.11.3 Credential Exfiltration via Link Header 0.5%
• CVE-2026-76228 Medium 6.7 Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper 1.0%
• CVE-2026-76227 Medium 5.5 Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure 0.2%