PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
renovate Renovate vulnerable to Azure DevOps token leakage in logs Medium Risk 6.0 6 years ago 4 hours ago
renovate Renovate vulnerable to leakage of temporary repository tokens into Pull Request comments Medium Risk 5.3 7 years ago 4 hours ago
renovate-config-doctolib Malicious code in renovate-config-doctolib (npm) Unknown 6 months ago 1 month ago
renovate Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration Medium Risk 6.7 9 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via gleam manager and malicious gleam.toml file Medium Risk 6.7 9 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependencies Medium Risk 6.7 9 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repository Medium Risk 6.7 9 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file Medium Risk 6.7 9 months ago 2 months ago
renovate Child processes spawned by Renovate incorrectly have full access to environment variables Medium Risk 5.5 8 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl` Medium Risk 6.7 9 months ago 2 months ago
renovate Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance Medium Risk 6.3 6 months ago 2 months ago
renovate Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases Medium Risk 5.4 2 years ago 2 months ago
bpm-foundation-renovate Malicious code in bpm-foundation-renovate (npm) Unknown 2 months ago 2 months ago
bpm-renovate-renovate-config Malicious code in bpm-renovate-renovate-config (npm) Unknown 2 months ago 2 months ago
@ornikar/renovate-config Malicious code in @ornikar/renovate-config (npm) Unknown 2 months ago 2 months ago
renovates Malicious code in renovates (npm) Unknown 1 year ago 1 year ago
Data courtesy of OSV.dev
Page 1