Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2191892
AlmaLinux
5906
Alpaquita
15522
Alpine
4594
Android
3674
Azure Linux
17170
BellSoft Hardened Containers
744
Bitnami
9227
Chainguard
1022159
CleanStart
3529
CRAN
14
crates.io
2730
Debian
67872
Echo
6683
GHC
3
GIT
107253
GitHub Actions
55
Go
9202
Hackage
32
Hex
356
Julia
1713
Linux
29602
Mageia
6219
Maven
7011
MinimOS
143505
npm
228723
NuGet
1867
opam
29
openEuler
8800
openSUSE
14377
OSS-Fuzz
4006
Packagist
7091
Pub
11
PyPI
25148
Red Hat
23271
Rocky Linux
4276
Root
19508
RubyGems
5325
SUSE
23075
SwiftURL
60
TuxCare
9421
Ubuntu
64627
VSCode
21
Wolfi
287481
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-8wc6-vgrq-x6cf
npm/renovate
Child processes spawned by Renovate incorrectly have full access to environment variables
13 Feb
Fix available
Severity - 5.5 (Medium)
CLEANSTART-2026-BQ28777
CleanStart/renovate
Security fix for ghsa-8wc6-vgrq-x6cf applied in: renovate 43.4.3-r1, renovate 43.4.4-r0
6 days ago
Fix available
CVE-2026-76227
github.com/renovatebot/renovate
Renovate 42.68.1 before 42.96.3 Environment Variable Exposure
19 Aug
Fix available
Severity - 6.8 (Medium)
Vulnerability Database - OSV