CVE-2026-76226
1 advisory.
npm/renovate CVE-2026-76226: medium 6.3
Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance
Action: Upgrade renovate to 43.102.11 or later.
npm i renovate@43.102.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 43.65.0 | 43.102.11 | - |
Fixed versions
| 43.102.11 |
Sources
- osv: GHSA-5vjq-5jmg-39xq
- https://github.com/renovatebot/renovate/security/advisories/GHSA-5vjq-5jmg-39xq
- https://github.com/renovatebot/renovate
- https://github.com/renovatebot/renovate/releases/tag/43.102.11
CVE-2026-76226 · published · modified · JSON