autoSource

AutoSource AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLCSoftware Development Life Cycle. The user can scan th...

sonarqube

SonarQube Continuous Inspection...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

sonarcloud-scan

Bitbucket Pipelines Pipe: SonarQube Cloud scan Scan your code with SonarQube Cloud to detects bugs, vulnerabilities and code smells in more than 25 programming languages. Your SonarCloud account must first be associated to your Bitbucket team or user account. SonarQube Cloud is totally free for...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

EUVD-2026-70131

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin versions 2.18.3 and earlier do not restrict URL schemes for dashboard links generated from SonarQube scanner results, permitting the javascript: scheme. This leads to a stored cross-site scripting (XSS) vulnerability exploitable by attackers holding Item/Configure...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

Nest v2026.08.24

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

CLEANSTART-2026-WG27700 Security fixes in sonarqube 26.8.0.126808-r2

Package sonarqube version 26.8.0.126808-r2 fixes 5 vulnerabilities: CVE-2026-59645, CVE-2026-56819, CVE-2026-59900, CVE-2026-59901, ghsa-mfg7-5gfp-c4w3...

CVE-2026-48813

A flaw was found in Flawfinder. An improper input neutralization issue leads to output manipulation, specifically, terminal/ANSI escape sequence injection and XML injection. A malicious filename can inject arbitrary content in the terminal output and improperly sanitized fields such as filenames,...

EUVD-2026-56901

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.6 security update

Important: Red Hat OpenShift GitOps v1.20.6 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10444 Document as known: GitOps deployment fails as Kustomize 5.8.1 HelmChartInflationGenerator omits SonarQube namespace...

CLEANSTART-2026-XA52912 Security fixes in sonarqube 25.12.0.117093-r0

Package sonarqube version 25.12.0.117093-r0 fixes 2 vulnerabilities: ghsa-qf7c-7r9h-mm92, CVE-2025-68384...

CLEANSTART-2026-VT41102 Security fixes in sonarqube 26.3.0.120487-r3

Package sonarqube version 26.3.0.120487-r3 fixes 19 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516...

CLEANSTART-2026-DC00064 Security fixes in sonarqube 26.3.0.120487-r1

Package sonarqube version 26.3.0.120487-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-YD42613 Security fixes in sonarqube 25.12.0.117093-r1

Package sonarqube version 25.12.0.117093-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-XA75352 Security fixes in sonarqube 25.12.0.117093-r3

Package sonarqube version 25.12.0.117093-r3 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

CLEANSTART-2026-RI78634 Security fixes in sonarqube 26.4.0.121862-r0

Package sonarqube version 26.4.0.121862-r0 fixes 8 vulnerabilities: CVE-2025-68161, CVE-2026-34479, CVE-2026-33870, CVE-2026-33871, CVE-2025-48924...

CLEANSTART-2026-KA96375 Security fixes in sonarqube 26.4.0.121862-r2

Package sonarqube version 26.4.0.121862-r2 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...