renovate vulnerabilities (npm)

11 vulnerabilities.

• renovate npm Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance CVE-2026-76226 Fix available 6.8 MediumApril 16, 2026
• renovate npm Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure CVE-2026-76227 Fix available 6.8 MediumFebruary 13, 2026
• renovate npm Renovate 31.51.0 before 40.33.0 Command Injection via helmv3 CVE-2026-76232 Fix available 8.4 HighJanuary 13, 2026
• renovate npm Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager CVE-2026-76233 Fix available 8.4 HighJanuary 13, 2026
• renovate npm Renovate 32.135.0 before 40.33.0 Command Injection via hermit CVE-2026-76231 Fix available 8.4 HighJanuary 13, 2026
• renovate npm Renovate 35.63.0 before 40.33.0 Command Injection via npm CVE-2026-76230 Fix available 8.4 HighJanuary 13, 2026
• renovate npm Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize CVE-2026-76229 Fix available 8.4 HighJanuary 13, 2026
• renovate npm Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper CVE-2026-76228 Fix available 8.4 HighJanuary 13, 2026
• renovate npm Renovate 37.158.0 before 37.199.0 Command Injection via helmv3 CVE-2024-58376 Fix available 8.4 HighApril 23, 2024
• renovate npm Renovate 19.180.0 before 23.25.1 Token Leakage via Logs CVE-2020-37267 Fix available 8.7 HighSeptember 14, 2020
• renovate npm Renovate before 19.38.7 Credential Exposure via Go Modules CVE-2019-25766 Fix available 8.7 HighOctober 21, 2019