If you find any bug with Renovate that may be a security problem, then e-mail us at: renovate-disclosure@mend.io. This way we can evaluate the bug and hopefully fix it before it gets abused. Please give us enough time to investigate the bug before you report it anywhere else.
Caution
Review the Mend Developer Platform Terms of Service before attempting to reproduce any issues with the Mend Renovate CLI on Mend-hosted infrastructure.
You may not legally be allowed to reproduce the security issue without advance, express written consent.
Please do not create GitHub issues for security-related doubts or problems.