Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2190851
AlmaLinux
5906
Alpaquita
15522
Alpine
4591
Android
3674
Azure Linux
17170
BellSoft Hardened Containers
744
Bitnami
9227
Chainguard
1022105
CleanStart
3506
CRAN
14
crates.io
2730
Debian
67864
Echo
6680
GHC
3
GIT
106891
GitHub Actions
55
Go
9199
Hackage
32
Hex
355
Julia
1713
Linux
29368
Mageia
6219
Maven
7010
MinimOS
143336
npm
228703
NuGet
1867
opam
29
openEuler
8674
openSUSE
14377
OSS-Fuzz
4006
Packagist
7085
Pub
11
PyPI
25135
Red Hat
23271
Rocky Linux
4276
Root
19508
RubyGems
5325
SUSE
23075
SwiftURL
60
TuxCare
9416
Ubuntu
64621
VSCode
21
Wolfi
287477
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-8wc6-vgrq-x6cf
npm/renovate
Child processes spawned by Renovate incorrectly have full access to environment variables
13 Feb
Fix available
Severity - 5.5 (Medium)
CLEANSTART-2026-BQ28777
CleanStart/renovate
Security fix for ghsa-8wc6-vgrq-x6cf applied in: renovate 43.4.3-r1, renovate 43.4.4-r0
6 days ago
Fix available
CVE-2026-76227
github.com/renovatebot/renovate
Renovate 42.68.1 before 42.96.3 Environment Variable Exposure
19 Aug
Fix available
Severity - 6.8 (Medium)
Vulnerability Database - OSV