Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Renovate packages may contain security weaknesses
published 1 month ago
Summary
Several Renovate components were found to have security weaknesses that could be exploited. The problems have been fixed in the latest releases of Renovate. Upgrade to the newest version to keep your system safe.
What to do
- Update cleanstart renovate to version 43.4.3-r1.
- Update cleanstart renovate to version 43.4.4-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | renovate |
< 43.4.3-r1 < 43.4.4-r0 Fix: upgrade to 43.4.3-r1
|
Original advisory text
Security fix for CVE-2026-1526 applied in: renovate 43.4.3-r1, renovate 43.4.4-r0
CVE-2026-1526 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.
Timeline
Published18 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-WP10370 · OSV
Track software like this
Free during beta