renovate

44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepository Homepage npm Atom feed

Your version

40.42.3

5 Jun 2025Where it was published

40.62.1 is the newest release of 40.x.

In short

1 fixed2 internal

Security

1 advisory affects 40.42.3; 42.68.5 fixes them

Moderate
Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`GHSA-pfq2-hh62-7m96 · 13 Jan 2026
Fixed in 42.68.5

Release note

Bug Fixes

workers/auto-replace: Correctly replace with digest and without replaceString