renovate-operator

Renovate: Kubernetes-нативный подход Запускайте Renovate в своей собственной инфраструктуре с планированием на основе CRD, параллельным выполнением, автоматическим обнаружением и встроенным интерфейсом. Если вы самостоятельно размещаете Renovate и уже используете Kubernetes, этот оператор даёт ва...

CLEANSTART-2026-UU13329 Security fixes in renovate 43.253.1-r1

Package renovate version 43.253.1-r1 fixes 1 vulnerabilities: CVE-2026-59873...

CLEANSTART-2026-CX70923 Security fixes in renovate 43.250.0-r2

Package renovate version 43.250.0-r2 fixes 1 vulnerabilities: CVE-2026-59873...

CLEANSTART-2026-KJ86076 Security fixes in renovate 43.252.8-r1

Package renovate version 43.252.8-r1 fixes 1 vulnerabilities: CVE-2026-59873...

CLEANSTART-2026-PU25929 Security fixes in renovate 43.251.3-r2

Package renovate version 43.251.3-r2 fixes 1 vulnerabilities: CVE-2026-59873...

CLEANSTART-2026-UX51846 Security fixes in renovate 44.31.0-r2

Package renovate version 44.31.0-r2 fixes 21 vulnerabilities: CVE-2026-59873, CVE-2026-59871, CVE-2026-59875, CVE-2026-59874, ghsa-r292-9mhp-454m...

CLEANSTART-2026-ZQ30772 Security fixes in renovate 44.32.5-r2

Package renovate version 44.32.5-r2 fixes 11 vulnerabilities: CVE-2026-39822, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

CLEANSTART-2026-DD38104 Security fixes in renovate 43.250.0-r1

Package renovate version 43.250.0-r1 fixes 1 vulnerabilities: CVE-2026-59873...

CLEANSTART-2026-NE40580 Security fixes in renovate 43.251.3-r1

Package renovate version 43.251.3-r1 fixes 1 vulnerabilities: CVE-2026-59873...

CLEANSTART-2026-ER20249 Security fixes in renovate 43.252.8-r2

Package renovate version 43.252.8-r2 fixes 1 vulnerabilities: CVE-2026-59873...

CLEANSTART-2026-NS82585 Security fixes in renovate 44.31.0-r1

Package renovate version 44.31.0-r1 fixes 17 vulnerabilities: CVE-2026-39822, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

CVE-2026-76227

A flaw was found in Renovate. The application fails to restrict environment variables when it creates new child processes. This oversight allows these child processes, such as those used for package installation or post-upgrade tasks, to access all environment variables of the main Renovate...

CVE-2026-76232

A flaw was found in Renovate. This command injection vulnerability exists in the helmv3 manager due to improper sanitization of the repository parameter when appended to helm registry login commands. An attacker with write access to a repository can exploit this by crafting malicious Chart.yaml...

CVE-2026-76230

A flaw was found in Renovate. This vulnerability, a command injection, exists within the npm manager due to improper sanitization of user-provided package names. An attacker with write access to a repository can exploit this by crafting malicious Renovate configuration files. This allows them to...

CVE-2026-76226

A flaw was found in Renovate. This vulnerability affects the bazel-module and bazelisk managers when processing lockFileMaintenance. A remote attacker can exploit this by providing malicious dependencies, leading to the execution of arbitrary code. This occurs when these dependencies are referenc...

CVE-2019-25766

A flaw was found in Renovate. During certain Go Modules update failure scenarios, temporary repository tokens are inadvertently leaked into pull request comments. A remote attacker able to view these comments could obtain the exposed tokens, leading to unauthorized access to repositories. This...

CVE-2026-76233

A flaw was found in Renovate. This command injection vulnerability exists within the gleam manager, where the 'depName' parameter is not properly sanitized when appended to 'gleam deps update' commands. An attacker with repository write access can exploit this by crafting malicious 'gleam.toml'...

CVE-2020-37267

A flaw was found in Renovate. When used with Azure DevOps, the bot's authorization token may be exposed in server or pipeline logs. This occurs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. An attacker with access to these logs could obtain the bot's...

CVE-2026-76231

A flaw was found in Renovate. Attackers with repository write access can exploit a command injection vulnerability in the hermit manager. This occurs because user-provided dependency names are not properly sanitized when appended to install and uninstall commands. Successful exploitation allows a...

CVE-2026-76228

A flaw was found in Renovate. This command injection vulnerability occurs when Renovate processes Gradle Wrapper updates. An attacker can introduce a malicious gradle-wrapper.properties file into a scanned repository, where a specially crafted distributionUrl containing shell command substitution...