CLEANSTART-2026-ZK21652 Security fixes in renovate 43.123.6-r0

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Security fixes in renovate 43.123.6-r0 for CLEANSTART-2026-ZK21652 addressing 14 vulnerabilities.

Reporter	Title	Published	Views	Family All 3056
vulnersOsv	@0t4u-org/eslint-config (>=0.6.0, <=0.6.2), @142vip/vue (>=0.1.6-alpha.11, <=0.1.6-alpha.18) +480 more potentially affected by CVE-2026-35209 via defu (>=6.0.0, <=6.1.4)	4 Apr 202606:17	–	vulnersosv
vulnersOsv	jo-cli (1.0.2) potentially affected by CVE-2026-33750 via brace-expansion (3.0.0)	26 Mar 202618:29	–	vulnersosv
vulnersOsv	@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1100 more potentially affected by CVE-2026-33671 via picomatch (>=4.0.0, <=4.0.3)	25 Mar 202621:12	–	vulnersosv
vulnersOsv	4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5671 more potentially affected by CVE-2025-13465 +1 more via lodash-es (>=4.0.0, <=4.17.23)	1 Apr 202623:50	–	vulnersosv
vulnersOsv	4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5671 more potentially affected by CVE-2021-23337 +1 more via lodash-es (>=4.0.0, <=4.17.23)	1 Apr 202623:51	–	vulnersosv
vulnersOsv	@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2025-13465 +1 more via lodash-amd (>=4.16.4, <=4.17.23)	1 Apr 202623:50	–	vulnersosv
vulnersOsv	@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +27 more potentially affected by CVE-2026-33750 via brace-expansion (>=1.1.0, <=1.1.11)	26 Mar 202618:29	–	vulnersosv
vulnersOsv	4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)	25 Mar 202621:13	–	vulnersosv
vulnersOsv	03-gs-ee-6 (0.3.5), @albgen/capacitor-escpos-plugin (>=0.0.4, <=1.0.1) +2903 more potentially affected by CVE-2026-33750 via brace-expansion (>=4.0.0, <=5.0.2)	26 Mar 202618:29	–	vulnersosv
vulnersOsv	@10xsai/cloudflare-router-nx-plugin (1.0.0), @4itech/schematics (>=11.7.1, <=11.7.6) +1100 more potentially affected by CVE-2026-33672 via picomatch (>=4.0.0, <=4.0.3)	25 Mar 202621:13	–	vulnersosv

Source	Link
github	www.github.com/renovatebot/renovate

04 Sep 2026 13:33Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.1 - 9.8

EPSS0.02759

SSVC