7 matches found
EUVD-2026-101749
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...
CVE-2026-110866
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...
CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...
CVE-2026-110866
Versions of Renovate prior to 44.61.3 are vulnerable to a protection mechanism bypass (CWE-693). The flaw allows an attacker to skip minimumReleaseAge checks when a user requests a PR rebase using the rebase/retry checkbox. This enables an attacker who publishes a malicious dependency to have tha...
CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...
CVE-2026-110866 Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...
CVE-2026-110866: Protection Mechanism Failure
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before...