Advisory Weakness Curation

Renovate vulnerable to leakage of temporary repository tokens into Pull Request comments ### Impact Temporary repository tokens were leaked into Pull Requests comments in during certain Go Modules update failure scenarios. ### Patches The problem has been patched. Self-hosted users should upgrade to v19.38.7 or later. ### Workarounds Disable Go Modules support. ### References Blog post: https://renovatebot.com/blog/go-modules-vulnerability-disclosure ### For more information If you have any questions or comments about this advisory: * Open an issue in Renovate http://github.com/renovatebot/renovate

Moderate severity vulnerability that affects renovate ## Go Modules Vulnerability Disclosure ### Impact Temporary repository tokens were leaked into Pull Requests comments in during certain Go Modules update failure scenarios. ### Patches The problem has been patched. Self-hosted users should upgrade to v19.38.7 or later. ### Workarounds Disable Go Modules support. ### References Blog post: https://renovatebot.com/blog/go-modules-vulnerability-disclosure ### For more information If you have any questions or comments about this advisory: * Open an issue in Renovate http://github.com/renovatebot/renovate * Email us at [support@renovatebot.com](mailto:support@renovatebot.com)