Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2190968
AlmaLinux
5906
Alpaquita
15522
Alpine
4591
Android
3674
Azure Linux
17170
BellSoft Hardened Containers
744
Bitnami
9227
Chainguard
1022105
CleanStart
3506
CRAN
14
crates.io
2730
Debian
67870
Echo
6683
GHC
3
GIT
106892
GitHub Actions
55
Go
9202
Hackage
32
Hex
356
Julia
1713
Linux
29368
Mageia
6219
Maven
7011
MinimOS
143413
npm
228712
NuGet
1867
opam
29
openEuler
8674
openSUSE
14377
OSS-Fuzz
4006
Packagist
7091
Pub
11
PyPI
25145
Red Hat
23271
Rocky Linux
4276
Root
19508
RubyGems
5325
SUSE
23075
SwiftURL
60
TuxCare
9416
Ubuntu
64621
VSCode
21
Wolfi
287477
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-8wc6-vgrq-x6cf
npm/renovate
Child processes spawned by Renovate incorrectly have full access to environment variables
13 Feb
Fix available
Severity - 5.5 (Medium)
CLEANSTART-2026-BQ28777
CleanStart/renovate
Security fix for ghsa-8wc6-vgrq-x6cf applied in: renovate 43.4.3-r1, renovate 43.4.4-r0
6 days ago
Fix available
CVE-2026-76227
github.com/renovatebot/renovate
Renovate 42.68.1 before 42.96.3 Environment Variable Exposure
19 Aug
Fix available
Severity - 6.8 (Medium)
Vulnerability Database - OSV