https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T16:02:23.562965+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2020-37267 fkie_cve-2020-37267 2026-10-06T16:02:23.928368+00:00

Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed in 23.25.1; Azure DevOps users should revoke and regenerate credentials if logs may have been exposed.

 https://vulnerability.circl.lu/vuln/ghsa-w8hm-jrh2-57j3 GHSA-w8hm-jrh2-57j3 2026-10-06T16:02:23.928456+00:00

Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed in 23.25.1; Azure DevOps users should revoke and regenerate credentials if logs may have been exposed.