[ Vendor · 4 CVEs ]
renovatebot
CVEs affecting renovatebot published in the last 30 days, plus any renovatebot CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110865 | 14 Oct 2026 | CVSS 7.1 | renovatebot renovateRenovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHeaders restriction by placing… | |
| CVE-2026-110866 | 14 Oct 2026 | CVSS 4.7 | renovatebot renovateRenovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests… | |
| CVE-2026-110867 | 14 Oct 2026 | CVSS 8.5 | renovatebot renovateRenovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env… | |
| CVE-2026-110868 | 14 Oct 2026 | CVSS 8.5 | renovatebot renovateRenovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary… |