Renovatebot

Renovatebot Renovate: vulnerabilities and CVEs

Renovatebot Renovate has 1 published vulnerabilities, 1 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs1

Last 12 months1

Critical0

Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVE	Severity	EPSS	Active exploitation	Published	Description
CVE-2026-76231	High (8.4)	1.0%	—	Aug 19, 2026	Renovate versions from 32.135.0 before 40.33.0 contain a command injection vulnerability in the hermit manager where user-provided dependency names are appended to install and uninstall commands without proper…

🎯 How it gets exploited (ATT&CK techniques)

T1059 Command and Scripting Interpreter1
T1068 Exploitation for Privilege Escalation1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.