npm/renovate CVE-2020-37267: high 7.5

Renovate vulnerable to Azure DevOps token leakage in logs

Action: Upgrade renovate to 23.25.1 or later.

npm i renovate@23.25.1

Affected

Fixed versions

Sources

• osv: GHSA-36rh-ggpr-j3gj
• nvd: CVE-2020-37267
• https://github.com/renovatebot/renovate/security/advisories/GHSA-36rh-ggpr-j3gj
• https://github.com/renovatebot/renovate

CVE-2020-37267 · published 2020-09-14T16:38:40Z · modified 2026-10-20T10:56:21.385567281Z · JSON