Advisories · Technology
mend-renovate-enterprise-edition.
Every CVE that names mend-renovate-enterprise-edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Renovate before 44.14.7 Command Injection via distributionType
- renovate
- mend renovate-ce
- Command injection
- CVSS 7.3 High
Renovate before 44.14.7 Command Injection via Mix organization
- renovate
- mend renovate-ce
- Command injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Renovate before 44.11.2 Credential Exfiltration via Link Header
- renovate
- mend renovate-ce
- Open redirect
- CVSS 8.5 High
Renovate before 44.14.7 Command Injection via gradle-wrapper
- renovate
- mend renovate-ce
- Command injection
- CVSS 7.3 High
Renovate before 44.14.7 Command Injection via depName
- renovate
- mend renovate-ce
- Command injection
- CVSS 6.9 Medium
Renovate before 44.3.1 Authentication Bypass via Digest Updates
- renovate
- mend renovate-ce
- Broken access control
- CVSS 8.3 High
Renovate before 44.14.4 TLS Private Key Log Sanitisation
- renovate
- mend renovate-ce
- Information disclosure
- CVSS 9.2 CriticalCritical · CVSS 9+
Renovate before 44.11.2 Credential Exfiltration via Link Header
- renovate
- mend renovate-ce
- Open redirect
- CVSS 9.2 CriticalCritical · CVSS 9+
Renovate before 44.11.3 Credential Exfiltration via Link Header
- renovate
- mend renovate-ce
- Open redirect
- CVSS 9.2 CriticalCritical · CVSS 9+
Renovate before 44.11.3 Credential Exfiltration via Link Header
- renovate
- mend renovate-ce
- Open redirect