R
Vendor security profile
renovatebot
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs25
Critical5
CISA KEV0
Public exploit5
Patch rate%20
Avg. CVSS8.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
11
10
4
CVE KEV
CVE severity distribution
25toplam CVE
Critical5 (20%)
High16 (64%)
Medium4 (16%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%20
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
20Unknown
Latest vulnerabilities
8.4
CVE-2026-110868
Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources
R
Patch status unknown
9.0
CVE-2026-110867
Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset
R
Patch status unknown
5.3
CVE-2026-110866
Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request
R
Patch status unknown
7.1
CVE-2026-110865
Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets
R
Patch status unknown
8.5
CVE-2026-88889
Renovate before 44.14.7 Command Injection via distributionType
R
Patch status unknownEPSS %1
7.3
CVE-2026-88888
Renovate before 44.14.7 Command Injection via Mix organization
R
Patch status unknownEPSS %1
9.2
CVE-2026-88887
Renovate before 44.11.2 Credential Exfiltration via Link Header
R
Patch status unknownEPSS %0
8.5
CVE-2026-88886
Renovate before 44.14.7 Command Injection via gradle-wrapper
R
Patch status unknownEPSS %0
7.3
CVE-2026-88885
Renovate before 44.14.7 Command Injection via depName
R
Patch status unknownEPSS %1
6.9
CVE-2026-88884
Renovate before 44.3.1 Authentication Bypass via Digest Updates
R
Patch status unknownEPSS %0