Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/09/10 4:49 p.m.•9 views

Insertion of Sensitive Information into Log File

Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File incomplete sanitization of TLS private keys in log output. An attacker can obtain sensitive cryptographic material by accessing logs where the private ke...

8.3CVSS5.9AI score0.00386EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/10 1:05 p.m.•40 views

CVE-2026-88883 Renovate before 44.14.4 TLS Private Key Log Sanitisation

Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...

8.3CVSS0.00386EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/10 1:05 p.m.•14 views

EUVD-2026-75433

Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...

8.3CVSS5.7AI score0.00386EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•2 views

CVE-2026-88883: Insertion of Sensitive Information into Log File

Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...

8.3CVSS5.8AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder