Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

renovatebot — Vulnerabilities & Security Advisories 21

Browse all 21 CVE security advisories affecting renovatebot. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability data for the vendor renovatebot, a tool designed for automated dependency updates. It collects public security advisories and weakness classifications associated with this specific vendor, covering the period from its initial release through the most recently indexed incident records. Readers can use this page to track the vendor’s published advisories, analyze the frequency of specific weakness types, and review the historical vulnerability landscape of the product without navigating individual entries.

Top products by renovatebot: renovate
CVE ID Title CVSS Severity Published
CVE-2026-88889 Renovate before 44.14.7 Command Injection via distributionType — renovate CWE-78 7.8 High 2026-09-10
CVE-2026-88887 Renovate before 44.11.2 Credential Exfiltration via Link Header — renovate CWE-601 8.6 High 2026-09-10
CVE-2026-88888 Renovate before 44.14.7 Command Injection via Mix organization — renovate CWE-78 7.0 High 2026-09-10
CVE-2026-88886 Renovate before 44.14.7 Command Injection via gradle-wrapper — renovate CWE-78 7.8 High 2026-09-10
CVE-2026-88884 Renovate before 44.3.1 Authentication Bypass via Digest Updates — renovate CWE-863 5.8 Medium 2026-09-10
CVE-2026-88885 Renovate before 44.14.7 Command Injection via depName — renovate CWE-78 7.0 High 2026-09-10
CVE-2026-88883 Renovate before 44.14.4 TLS Private Key Log Sanitisation — renovate CWE-532 7.7 High 2026-09-10
CVE-2026-88882 Renovate before 44.11.2 Credential Exfiltration via Link Header — renovate CWE-601 8.6 High 2026-09-10
CVE-2026-88881 Renovate before 44.11.3 Credential Exfiltration via Link Header — renovate CWE-601 8.6 High 2026-09-10
CVE-2026-88880 Renovate before 44.11.3 Credential Exfiltration via Link Header — renovate CWE-601 8.6 High 2026-09-10
CVE-2026-76233 Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager — renovate CWE-77 6.7 Medium 2026-08-19
CVE-2026-76232 Renovate 31.51.0 before 40.33.0 Command Injection via helmv3 — renovate CWE-77 6.7 Medium 2026-08-19
CVE-2026-76230 Renovate 35.63.0 before 40.33.0 Command Injection via npm — renovate CWE-77 6.7 Medium 2026-08-19
CVE-2026-76231 Renovate 32.135.0 before 40.33.0 Command Injection via hermit — renovate CWE-77 6.7 Medium 2026-08-19
CVE-2026-76229 Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize — renovate CWE-77 6.7 Medium 2026-08-19
CVE-2026-76228 Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper — renovate CWE-78 6.7 Medium 2026-08-19
CVE-2026-76227 Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure — renovate CWE-526 5.5 Medium 2026-08-19
CVE-2026-76226 Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance — renovate CWE-78 6.3 Medium 2026-08-19
CVE-2024-58376 Renovate 37.158.0 before 37.199.0 Command Injection via helmv3 — renovate CWE-78 6.7 Medium 2026-08-19
CVE-2020-37267 Renovate 19.180.0 before 23.25.1 Token Leakage via Logs — renovate CWE-532 7.5 High 2026-08-19
CVE-2019-25766 Renovate before 19.38.7 Credential Exposure via Go Modules — renovate CWE-532 7.5 High 2026-08-19

This page lists every published CVE security advisory associated with renovatebot. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.