Skip to content
Threat Feed
Subscribe

Vendor

Renovate

2 briefs RSS
high advisory

Renovate Allowlist Bypass via Shared Presets

Renovate versions prior to 44.60.1 are vulnerable to an allowlist bypass that permits repository users to inject arbitrary HTTP headers via malicious shared presets.

Renovate vulnerability supply-chain cve-2026-110865
1c
high advisory

Improper Link Header Validation in Renovate

Renovate versions prior to 44.11.3 fail to validate Link header destinations during GitLab server pagination, enabling attackers to exfiltrate credentials via malicious redirects.

Renovate +1 supply-chain vulnerability gitlab
1t 1c