CVE ID :CVE-2026-110868 Published : Oct. 14, 2026, 11:17 p.m. | 4ย hours, 55ย minutes ago Description :Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Attackers can point a preset at an instance metadata service endpoint to obtain AWS
Vulnerability
CVE-2026-110868
MITRE CVE High
Refer to CVE-2026-110868 NVD advisory