Vulnerabilidades em renovatebot

21 resultados
Análise Vexday

Renovatebot apresenta 11 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando risco recente e concentrado. Embora nenhuma esteja sob exploração ativa no momento, 1 vulnerabilidade crítica (CWE-77: Improper Neutralization of Special Elements used in a Command) representa vetor de comando injection que demanda atenção prioritária. O volume de descobertas em curto espaço temporal sugere intensidade de análise de segurança recente no projeto.

CVE-2024-58376CRITICALRenovate 37.158.0 before 37.199.0 Command Injection via helmv3EPSS 1.7%CVE-2026-76231HIGHRenovate 32.135.0 before 40.33.0 Command Injection via hermitEPSS 0.9%CVE-2026-76232HIGHRenovate 31.51.0 before 40.33.0 Command Injection via helmv3EPSS 0.9%CVE-2026-76230HIGHRenovate 35.63.0 before 40.33.0 Command Injection via npmEPSS 0.9%CVE-2026-76233HIGHRenovate 39.53.0 before 40.33.0 Command Injection via gleam managerEPSS 0.9%CVE-2026-76228HIGHRenovate before 42.68.5 Remote Code Execution via Gradle WrapperEPSS 0.8%CVE-2026-76229HIGHRenovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomizeEPSS 0.7%CVE-2026-88889HIGHRenovate before 44.14.7 Command Injection via distributionTypeEPSS 0.6%CVE-2026-88885HIGHRenovate before 44.14.7 Command Injection via depNameEPSS 0.5%CVE-2026-88888HIGHRenovate before 44.14.7 Command Injection via Mix organizationEPSS 0.5%CVE-2026-88880CRITICALRenovate before 44.11.3 Credential Exfiltration via Link HeaderEPSS 0.4%CVE-2020-37267HIGHRenovate 19.180.0 before 23.25.1 Token Leakage via LogsEPSS 0.3%CVE-2019-25766HIGHRenovate before 19.38.7 Credential Exposure via Go ModulesEPSS 0.3%CVE-2026-88882CRITICALRenovate before 44.11.2 Credential Exfiltration via Link HeaderEPSS 0.3%CVE-2026-88881CRITICALRenovate before 44.11.3 Credential Exfiltration via Link HeaderEPSS 0.3%CVE-2026-88887CRITICALRenovate before 44.11.2 Credential Exfiltration via Link HeaderEPSS 0.3%CVE-2026-88883HIGHRenovate before 44.14.4 TLS Private Key Log SanitisationEPSS 0.3%CVE-2026-88884MEDIUMRenovate before 44.3.1 Authentication Bypass via Digest UpdatesEPSS 0.2%CVE-2026-76226MEDIUMRenovate 43.65.0 through 43.102.11 Remote Code Execution via lockFileMaintenanceEPSS 0.2%CVE-2026-88886HIGHRenovate before 44.14.7 Command Injection via gradle-wrapperEPSS 0.2%