autoSource

AutoSource AutoSource es un marco de revisión automatizada de código fuente integrado con SonarQube, capaz de realizar análisis/revisiones estáticas de código. Se puede utilizar para encontrar vulnerabilidades de manera efectiva en una etapa muy temprana del SDLC Ciclo de Vida del Desarrollo de...

sonarqube

SonarQube Continuous Inspection SonarQube provides the capability to not only show the health of an application but also to highlight issues newly introduced. With a Quality Gate in place, you can achieve Clean Code and therefore improve code quality systematically. Links Website Download...

CVE-2026-77310 vulnerabilities

Vulnerabilities for packages: akhq, sonarqube...

GHSA-VVGP-RFG2-7RR6 vulnerabilities

Vulnerabilities for packages: akhq, sonarqube...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

CLEANSTART-2026-RI59147 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-TK63612 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-FF14094 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-MM56894 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...

CLEANSTART-2026-HB84479 Path-traversal vulnerability in QOS

Security vulnerability affects the sonarqube package. Path-traversal vulnerability in QOS...

CLEANSTART-2026-SP20154 ACE vulnerability in conditional configuration file processing by QOS

Security vulnerability affects the sonarqube package. ACE vulnerability in conditional configuration file processing by QOS...

CLEANSTART-2026-ET86830 Deserialization of untrusted data vulnerability in QOS

Security vulnerability affects the sonarqube package. Deserialization of untrusted data vulnerability in QOS...

sonarcloud-scan

Bitbucket Pipelines Pipe: SonarQube Cloud scan Scan your code with SonarQube Cloud to detects bugs, vulnerabilities and code smells in more than 25 programming languages. Your SonarCloud account must first be associated to your Bitbucket team or user account. SonarQube Cloud is totally free for...

CLEANSTART-2026-GO07314 Security fix for CVE-2025-37731 applied in: sonarqube 25.12.0.117093-r2

Security vulnerability affects the sonarqube package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SU96145 Security fix for CVE-2025-37727 applied in: sonarqube 25.12.0.117093-r2

Security vulnerability affects the sonarqube package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JA11762 Security fix for CVE-2025-68390 applied in: sonarqube 25.12.0.117093-r2

Security vulnerability affects the sonarqube package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ND94120 Security fix for CVE-2025-68384 applied in: sonarqube 25.12.0.117093-r2, sonarqube 26.3.0.120487-r0

CVE-2025-68384 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GB27003 Security fix for CVE-2026-13006 applied in: akhq 0.27.1-r5, apache-nifi 2.10.0-r1, apache-nifi 2.6.0-r3, apache-nifi-registry 2.9.0-r3, cassandra-reaper-fips 4.2.5-r1, sonarqube 26.3.0.120487-r3, trino 480-r4, trino 483-r2

CVE-2026-13006 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XT77636 Security fix for CVE-2026-9563 applied in: keycloak 26.4.7-r5, keycloak 26.5.7-r4, keycloak 26.6.3-r3, sonarqube 26.3.0.120487-r3

CVE-2026-9563 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...