- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/31/2026, mend-renovate-ce recorded 10 security vulnerabilities in the last 90 days, of which 9 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of mend-renovate-ce and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-88889Renovate before 44.14.7 Command Injection via distributionTypeCVE-2026-88888Renovate before 44.14.7 Command Injection via Mix organizationCVE-2026-88887Renovate before 44.11.2 Credential Exfiltration via Link HeaderCVE-2026-88886Renovate before 44.14.7 Command Injection via gradle-wrapperCVE-2026-88885Renovate before 44.14.7 Command Injection via depName| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-88889Renovate before 44.14.7 Command Injection via distributionType | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-88888Renovate before 44.14.7 Command Injection via Mix organization | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-88887Renovate before 44.11.2 Credential Exfiltration via Link Header | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityCritical |
CVE-2026-88886Renovate before 44.14.7 Command Injection via gradle-wrapper | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-88885Renovate before 44.14.7 Command Injection via depName | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-88884Renovate before 44.3.1 Authentication Bypass via Digest Updates | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
CVE-2026-88883Renovate before 44.14.4 TLS Private Key Log Sanitisation | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-88882Renovate before 44.11.2 Credential Exfiltration via Link Header | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityCritical |
CVE-2026-88881Renovate before 44.11.3 Credential Exfiltration via Link Header | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityCritical |
CVE-2026-88880Renovate before 44.11.3 Credential Exfiltration via Link Header | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityCritical |
10 Results | Page 1 of 1