SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

CLEANSTART-2026-WG27700 Security fixes in sonarqube 26.8.0.126808-r2

Package sonarqube version 26.8.0.126808-r2 fixes 5 vulnerabilities: CVE-2026-59645, CVE-2026-56819, CVE-2026-59900, CVE-2026-59901, ghsa-mfg7-5gfp-c4w3...

CVE-2026-48813

A flaw was found in Flawfinder. An improper input neutralization issue leads to output manipulation, specifically, terminal/ANSI escape sequence injection and XML injection. A malicious filename can inject arbitrary content in the terminal output and improperly sanitized fields such as filenames,...

EUVD-2026-56901

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.6 security update

Important: Red Hat OpenShift GitOps v1.20.6 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10444 Document as known: GitOps deployment fails as Kustomize 5.8.1 HelmChartInflationGenerator omits SonarQube namespace...

CLEANSTART-2026-YD42613 Security fixes in sonarqube 25.12.0.117093-r1

Package sonarqube version 25.12.0.117093-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-DC00064 Security fixes in sonarqube 26.3.0.120487-r1

Package sonarqube version 26.3.0.120487-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-VT41102 Security fixes in sonarqube 26.3.0.120487-r3

Package sonarqube version 26.3.0.120487-r3 fixes 19 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516...

CLEANSTART-2026-KA96375 Security fixes in sonarqube 26.4.0.121862-r2

Package sonarqube version 26.4.0.121862-r2 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

CLEANSTART-2026-XA75352 Security fixes in sonarqube 25.12.0.117093-r3

Package sonarqube version 25.12.0.117093-r3 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

CLEANSTART-2026-RI78634 Security fixes in sonarqube 26.4.0.121862-r0

Package sonarqube version 26.4.0.121862-r0 fixes 8 vulnerabilities: CVE-2025-68161, CVE-2026-34479, CVE-2026-33870, CVE-2026-33871, CVE-2025-48924...

GHSA-574F-3G2M-X479 vulnerabilities

Vulnerabilities for packages: opensearch, hadoop-fips, sonarqube, logstash-fips, logstash...

CVE-2025-14813 vulnerabilities

Vulnerabilities for packages: opensearch, hadoop-fips, sonarqube, logstash-fips, logstash...

CVE-2025-14813 vulnerabilities

Vulnerabilities for packages: sonarqube, logstash...

GHSA-574F-3G2M-X479 vulnerabilities

Vulnerabilities for packages: sonarqube, logstash...

CLEANSTART-2026-QW49365 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial o...

Multiple security vulnerabilities affect the sonarqube package. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation CAPEC-130 causing a persistent denial of service OOM crash via submission of...

CVE-2026-3816

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...

EUVD-2026-10325

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...

CVE-2026-3816

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...

CVE-2026-3816

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...