Skip to content
Threat Feed
Subscribe

Product

Renovate (19.180.0-23.25.0)

1 brief RSS
high advisory

Information Disclosure in Renovate via Azure DevOps Pipeline Logs

Renovate versions 19.180.0 through 23.25.0 insecurely log Git authorization headers when interacting with Azure DevOps, potentially exposing sensitive bot credentials in pipeline logs.

Renovate +2
1t 1c