Mend Mend-Renovate-Enterprise-Edition
4 CVEs affecting Mend Mend-Renovate-Enterprise-Edition. Latest disclosed: 2026-09-10. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-88887 | High | 8.6 | 2026-09-10 | Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote regi… |
CVE-2026-88882 | High | 8.6 | 2026-09-10 | Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterpr… |
CVE-2026-88889 | High | 7.8 | 2026-09-10 | Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifyi… |
CVE-2026-88888 | High | 7.0 | 2026-09-10 | Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependencies with unescaped organization paramete… |