Directory Security Advisories Pricing

Security Advisories

CGA-65gm-pc8x-gp5g

Package

renovate

Component

stdlib

Latest update

Fixed

Fixed version

43.86.1-r0

Aliases

Severity

2.5

Low

CVSS V3

Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

References

Updates

Status

Fixed

Fixed version

43.86.1-r0

Status

Pending upstream fix

Impact

CVE-2026-27139 is in a precompiled Go binary (tsgolint) bundled inside the npm dependency @oxlint-tsgolint/linux-x64@0.16.0. This binary was compiled upstream with go1.26.0 and is downloaded as-is during the pnpm install — it is not built from source during our package build. An epoch bump has no effect. Waiting for upstream to release a version compiled with go1.26.1+.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Affected

Impact

Govulncheck found vulnerable symbols in Go binary at usr/lib/renovate/node_modules/.pnpm/@oxlint-tsgolint+linux-x64@0.16.0/node_modules/@oxlint-tsgolint/linux-x64/tsgolint.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.