Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2622498
AlmaLinux
6419
Alpaquita
17596
Alpine
10710
Android
4071
Azure Linux
20379
BellSoft Hardened Containers
946
Bitnami
10023
Chainguard
1291574
CleanStart
17691
CRAN
14
crates.io
3001
Debian
73540
Echo
8070
GHC
3
GIT
119332
GitHub Actions
63
Go
9770
Hackage
36
Hex
431
Julia
1713
Linux
31104
Mageia
6361
Maven
7135
MinimOS
184628
npm
230980
NuGet
1955
opam
36
openEuler
9532
openSUSE
15288
OSS-Fuzz
4058
Packagist
7293
Pub
12
PyPI
26250
Red Hat
23995
Red Hat Lightwell
278
Rocky Linux
4775
Root
20224
RubyGems
5442
SUSE
24464
SwiftURL
61
TuxCare
23248
Ubuntu
70204
VSCode
21
Wolfi
329772
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-8wc6-vgrq-x6cf
npm/renovate
Child processes spawned by Renovate incorrectly have full access to environment variables
13 Feb
Fix available
Severity - 5.5 (Medium)
CLEANSTART-2026-BQ28777
CleanStart/renovate
Security fix for GHSA-8wc6-vgrq-x6cf applied in: renovate 43.4.3-r1, renovate...
18 Sep
Fix available
Severity - 5.5 (Medium)
CVE-2026-76227
github.com/renovatebot/renovate
Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable...
19 Aug
Fix available
Severity - 6.8 (Medium)
Vulnerability Database - OSV