renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

CVE-2026-88882

A flaw was found in Renovate, a dependency update automation tool. When listing new package versions from a NuGet registry, Renovate follows pagination URLs provided in the HTTP Link header without verifying the target's origin. A malicious or compromised NuGet registry can exploit this by...

GHSA-VWC7-R8MQ-G2X9 vulnerabilities

Vulnerabilities for packages: renovate, saf, sqlpad...

CVE-2026-76845 vulnerabilities

Vulnerabilities for packages: renovate, saf, sqlpad...

CLEANSTART-2026-RL65112 Security fix for CVE-2026-25547 applied in: npm 11.8.0-r0, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r0, sqlpad 7.5.7-r1

CVE-2026-25547 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZI47888 Security fix for CVE-2026-23745 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.7.0-r0, renovate 43.4.4-r0

CVE-2026-23745 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RC77081 Security fix for CVE-2026-26996 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, npm 11.10.0-r1, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-26996 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN34341 Security fix for CVE-2026-26960 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.10.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-26960 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DD51725 Security fix for CVE-2026-2581 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-2581 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NW80609 Security fix for CVE-2026-2229 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-2229 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX81460 Security fix for CVE-2026-1528 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-1528 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FZ57478 Security fix for CVE-2026-1527 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-1527 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WP10370 Security fix for CVE-2026-1526 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-1526 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NI54084 Security fix for CVE-2026-1525 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-1525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BO70828 Security fix for CVE-2026-2327 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-2327 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HY98415 Security fix for CVE-2025-64756 applied in: renovate 43.4.4-r0

Security vulnerability affects the renovate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WV30852 Security fix for CVE-2026-29786 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BE82466 Security fix for CVE-2026-32141 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-32141 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NS67921 Security fix for CVE-2025-69873 applied in: argo-workflows 3.6.19-r8, mongosh 2.5.10-r5, mongosh 2.6.0-r4, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2025-69873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZP55768 Security fix for CVE-2026-27601 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2026-27601 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...