Rrenovatebot

Products

Exploited and recent CVEs

• CVE-2026-110868 High 8.5 Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources 0.2%
• CVE-2026-110867 High 8.5 Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset 0.3%
• CVE-2026-110866 Medium 4.7 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request 0.2%
• CVE-2026-110865 High 7.1 Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 0.2%
• CVE-2026-88889 High 7.8 Renovate before 44.14.7 Command Injection via distributionType 1.0%
• CVE-2026-88888 High 7.0 Renovate before 44.14.7 Command Injection via Mix organization 0.9%
• CVE-2026-88887 High 8.6 Renovate before 44.11.2 Credential Exfiltration via Link Header 0.4%
• CVE-2026-88886 High 7.8 Renovate before 44.14.7 Command Injection via gradle-wrapper 0.2%
• CVE-2026-88885 High 7.0 Renovate before 44.14.7 Command Injection via depName 0.9%
• CVE-2026-88884 Medium 5.8 Renovate before 44.3.1 Authentication Bypass via Digest Updates 0.3%
• CVE-2026-88883 High 7.7 Renovate before 44.14.4 TLS Private Key Log Sanitisation 0.4%
• CVE-2026-88882 High 8.6 Renovate before 44.11.2 Credential Exfiltration via Link Header 0.4%
• CVE-2026-88881 High 8.6 Renovate before 44.11.3 Credential Exfiltration via Link Header 0.4%
• CVE-2026-88880 High 8.6 Renovate before 44.11.3 Credential Exfiltration via Link Header 0.5%
• CVE-2026-76233 Medium 6.7 Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager 1.0%
• CVE-2026-76232 Medium 6.7 Renovate 31.51.0 before 40.33.0 Command Injection via helmv3 1.0%
• CVE-2026-76231 Medium 6.7 Renovate 32.135.0 before 40.33.0 Command Injection via hermit 1.0%
• CVE-2026-76230 Medium 6.7 Renovate 35.63.0 before 40.33.0 Command Injection via npm 1.0%
• CVE-2026-76229 Medium 6.7 Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize 1.0%
• CVE-2026-76228 Medium 6.7 Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper 1.0%
• CVE-2026-76227 Medium 5.5 Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure 0.2%
• CVE-2026-76226 Medium 6.3 Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance 0.3%
• CVE-2024-58376 Medium 6.7 Renovate 37.158.0 before 37.199.0 Command Injection via helmv3 0.7%
• CVE-2020-37267 High 7.5 Renovate 19.180.0 before 23.25.1 Token Leakage via Logs 0.4%