npm/renovate CVE-2019-25766: medium 5.3
Renovate vulnerable to leakage of temporary repository tokens into Pull Request comments
Action: Upgrade renovate to 19.38.7 or later.
npm i renovate@19.38.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.87.0 | 19.38.7 | - |
Fixed versions
| 19.38.7 |
Sources
- osv: GHSA-v7x3-7hw7-pcjg
- https://github.com/renovatebot/renovate/security/advisories/GHSA-v7x3-7hw7-pcjg
- https://github.com/advisories/GHSA-v7x3-7hw7-pcjg
- https://github.com/renovatebot/renovate
- https://snyk.io/vuln/SNYK-JS-RENOVATE-536203
CVE-2019-25766 · published · modified · JSON