Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior
Críticas / altas1270▼ 74 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Crítica (9.2) | 0.41% | — | RenovateAIMend Renovate CEAIMend Renovate EEAI | 10/9/2026 | 29/9/2026 | Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has the same origin as the… | |
| Pendiente de análisis | Alta (8.5) | 0.23% | — | RenovateAIMend Renovate CEAIMend Renovate EEAIMend Renovate Enterprise EditionAI | 10/9/2026 | 29/9/2026 | Renovate is a dependency update automation tool. In versions before 44.14.7 (and in Mend Renovate CE/EE distributions before 15.4.0, and the mend-renovate-enterprise-edition Helm chart before 10.4.0), the manager/gradle-wrapper module does not escape the distributionUrl value read from a repository's… | |
| Pendiente de análisis | Crítica (9.2) | 0.41% | — | RenovateAIMend Renovate CEAIMend Renovate EEAIMend Renovate Enterprise EditionAI | 10/9/2026 | 29/9/2026 | Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0), when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by the registry in the… | |
| Pendiente de análisis | Alta (8.4) | 0.96% | — | RenovateAIMend Renovate-ceAIMend Renovate-eeAI | 19/8/2026 | 29/9/2026 | Renovate versions >=32.124.0 and before 42.68.5 (and Mend renovate-ce/renovate-ee before 13.3.0) contain a command injection vulnerability in Gradle Wrapper artifact handling. When Renovate processes Gradle Wrapper updates, it invokes a wrapper update command via a shell (e.g. /bin/sh -c ... ./gradlew :wrapper… | |
| Pendiente de análisis | Media (6.8) | 0.15% | — | RenovateAIMend Renovate-ceAIRenovate-ee-serverAIRenovate-ee-workerAI | 19/8/2026 | 29/9/2026 | Renovate versions from 42.68.1 before 42.96.3 and from 43.0.0 before 43.4.4, including the renovate/renovate Docker images, and Mend Renovate CE/EE images (renovate-ce, renovate-ee-server, renovate-ee-worker) from 13.3.0 before 13.6.0, fail to restrict environment variables to an allowlist when spawning child… |