What’s Vulnerable › Products

mend-renovate-ce vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your mend-renovate-ce version is affected

Latest mend-renovate-ce vulnerabilities

• CVE-2026-88889 — Renovate before 44.14.7 Command Injection via distributionType (CVSS 7.8)
• CVE-2026-88888 — Renovate before 44.14.7 Command Injection via Mix organization (CVSS 7.0)
• CVE-2026-88887 — Renovate before 44.11.2 Credential Exfiltration via Link Header (CVSS 8.6)
• CVE-2026-88886 — Renovate before 44.14.7 Command Injection via gradle-wrapper (CVSS 7.8)
• CVE-2026-88885 — Renovate before 44.14.7 Command Injection via depName (CVSS 7.0)
• CVE-2026-88884 — Renovate before 44.3.1 Authentication Bypass via Digest Updates (CVSS 5.8)
• CVE-2026-88883 — Renovate before 44.14.4 TLS Private Key Log Sanitisation (CVSS 7.7)
• CVE-2026-88882 — Renovate before 44.11.2 Credential Exfiltration via Link Header (CVSS 8.6)
• CVE-2026-88881 — Renovate before 44.11.3 Credential Exfiltration via Link Header (CVSS 8.6)
• CVE-2026-88880 — Renovate before 44.11.3 Credential Exfiltration via Link Header (CVSS 8.6)