R
Vendor security profile
renovatebot
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs21
Critical4
CISA KEV0
Public exploit5
Patch rate%24
Avg. CVSS8.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
11
10
0
CVE KEV
CVE severity distribution
21toplam CVE
Critical4 (19%)
High14 (67%)
Medium3 (14%)
Patch and exploitation view
%24
Verified patch
%0
CISA KEV
%24
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
8.5
CVE-2026-88889
Renovate before 44.14.7 Command Injection via distributionType
R
Patch status unknownEPSS %1
7.3
CVE-2026-88888
Renovate before 44.14.7 Command Injection via Mix organization
R
Patch status unknownEPSS %1
9.2
CVE-2026-88887
Renovate before 44.11.2 Credential Exfiltration via Link Header
R
Patch status unknownEPSS %0
8.5
CVE-2026-88886
Renovate before 44.14.7 Command Injection via gradle-wrapper
R
Patch status unknownEPSS %0
7.3
CVE-2026-88885
Renovate before 44.14.7 Command Injection via depName
R
Patch status unknownEPSS %1
6.9
CVE-2026-88884
Renovate before 44.3.1 Authentication Bypass via Digest Updates
R
Patch status unknownEPSS %0
8.3
CVE-2026-88883
Renovate before 44.14.4 TLS Private Key Log Sanitisation
R
Patch status unknownEPSS %0
9.2
CVE-2026-88882
Renovate before 44.11.2 Credential Exfiltration via Link Header
R
Patch status unknownEPSS %0
9.2
CVE-2026-88881
Renovate before 44.11.3 Credential Exfiltration via Link Header
R
Patch status unknownEPSS %0
9.2
CVE-2026-88880
Renovate before 44.11.3 Credential Exfiltration via Link Header
R
Patch status unknownEPSS %1