Mend Mend-Renovate-CE Helm Chart vulnerabilities

4 CVEs affecting Mend Mend-Renovate-CE Helm Chart, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-110868, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-110867, published 2026-10-14. High severity, CVSS 8.5. EPSS: 0.3% chance of exploitation in the next 30 days. Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env inside a shared preset. Attackers controlling an…
CVE-2026-110868, published 2026-10-14. High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days. Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources.…
CVE-2026-110866, published 2026-10-14. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox.…
CVE-2026-110865, published 2026-10-14. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHeaders restriction by placing hostRules headers inside shared presets. Attackers…