Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-8wc6-vgrq-x6cf
  • npm/renovate
 Child processes spawned by Renovate incorrectly have full access to environment variables 13 Feb
  • Fix available
  • Severity - 5.5 (Medium)
CLEANSTART-2026-BQ28777
  • CleanStart/renovate
 Security fix for ghsa-8wc6-vgrq-x6cf applied in: renovate 43.4.3-r1, renovate 43.4.4-r0 18 Sep
  • Fix available
CVE-2026-76227
  • github.com/renovatebot/renovate
 Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure 19 Aug
  • Fix available
  • Severity - 6.8 (Medium)