{"id":"CLEANSTART-2026-IA01903","summary":"Security fixes in renovate 43.4.3-r1","details":"Package renovate version 43.4.3-r1 fixes 49 vulnerabilities: ghsa-8wc6-vgrq-x6cf, CVE-2026-28292, ghsa-r275-fr43-pm7q, CVE-2026-25896, ghsa-m7jm-9gc2-mpf2...","modified":"2026-09-18T12:15:59.043925633Z","published":"2026-07-30T07:10:53Z","withdrawn":"2026-09-18T11:59:01.768079Z","upstream":["CVE-2025-69873","CVE-2026-1525","CVE-2026-1526","CVE-2026-1527","CVE-2026-1528","CVE-2026-2229","CVE-2026-2327","CVE-2026-2391","CVE-2026-25128","CVE-2026-25547","CVE-2026-2581","CVE-2026-25896","CVE-2026-26278","CVE-2026-26960","CVE-2026-26996","CVE-2026-27601","CVE-2026-27903","CVE-2026-27904","CVE-2026-27942","CVE-2026-28292","CVE-2026-29786","CVE-2026-31802","CVE-2026-32141","CVE-2026-33036","ghsa-23c5-xmqv-rm74","ghsa-25h7-pfq9-p65f","ghsa-2g4f-4pwh-qvx6","ghsa-2mjp-6q6p-2qxm","ghsa-37qj-frw5-hhjh","ghsa-38c4-r59v-3vqw","ghsa-3ppc-4f35-3m26","ghsa-4992-7rv2-5pvq","ghsa-7h2j-956f-4vf2","ghsa-7r86-cg39-jmmj","ghsa-83g3-92jg-28cx","ghsa-8gc5-j5rx-235r","ghsa-8wc6-vgrq-x6cf","ghsa-9ppj-qmqm-q256","ghsa-f269-vfmq-vjvj","ghsa-fj3w-jwp8-x2g3","ghsa-jmr7-xgp7-cmfj","ghsa-m7jm-9gc2-mpf2","ghsa-phc3-fgpg-7m6h","ghsa-qffp-2rhf-9h96","ghsa-qpx9-hpmf-5gmw","ghsa-r275-fr43-pm7q","ghsa-v9p9-hfj2-hcw8","ghsa-vrm6-8vpv-qv8q","ghsa-w7fw-mjwx-w883"],"database_specific":{},"references":[{"type":"WEB","url":"https://github.com/renovatebot/renovate"}],"affected":[{"package":{"name":"renovate","ecosystem":"CleanStart"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"43.4.3-r1"}]}],"versions":["43.4.3-r1"],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IA01903.json"}}],"schema_version":"1.9.0"}