ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.hortis.sonar:sonar-commons (>=1.0-beta, <=1.0.2) +24 more potentially affected by CVE-2026-1225 via ch.qos.logback:logback-core (0.9.8)

ch.qos.logback:logback-core MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-application =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =0.9.9, =0.9.9,...

ch.hortis.sonar:sonar-commons (0.2), ch.hortis.sonar:sonar-maven-plugin (0.2) +4 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.5)

ch.qos.logback:logback-core MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-commons 0.2 - ch.hortis.sonar:sonar-maven-plugin 0.2 - ch.qos.logback:log4j-bridge...