Nest v2026.08.24

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

autoSource

AutoSource AutoSource एक स्वचालित स्रोत कोड समीक्षा ढाँचा है जो SonarQube के साथ एकीकृत है और स्थैतिक कोड विश्लेषण/समीक्षा करने में सक्षम है। इसका उपयोग SDLC सॉफ्टवेयर विकास जीवन चक्र के बहुत प्रारंभिक चरण में कमजोरियों को प्रभावी ढंग से खोजने के लिए किया जा सकता है। उपयोगकर्ता ढाँचे में केवल GIT...

sonarcloud-scan

Bitbucket Pipelines Pipe: SonarQube Cloud scan Scannen Sie Ihren Code mit SonarQube Cloud, um Bugs, Sicherheitslücken und Code-Smells in mehr als 25 Programmiersprachen zu erkennen. Ihr SonarCloud-Konto muss zunächst mit Ihrem Bitbucket-Team oder Benutzerkonto verknüpft werden. SonarQube Cloud is...

sonarqube

SonarQube Kontinuierliche Inspektion...

CLEANSTART-2026-WG27700 Security fixes in sonarqube 26.8.0.126808-r2

Package sonarqube version 26.8.0.126808-r2 fixes 5 vulnerabilities: CVE-2026-59645, CVE-2026-56819, CVE-2026-59900, CVE-2026-59901, ghsa-mfg7-5gfp-c4w3...

CVE-2026-48813

A flaw was found in Flawfinder. An improper input neutralization issue leads to output manipulation, specifically, terminal/ANSI escape sequence injection and XML injection. A malicious filename can inject arbitrary content in the terminal output and improperly sanitized fields such as filenames,...

EUVD-2026-56901

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.6 security update

Important: Red Hat OpenShift GitOps v1.20.6 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10444 Document as known: GitOps deployment fails as Kustomize 5.8.1 HelmChartInflationGenerator omits SonarQube namespace...

CLEANSTART-2026-VT41102 Security fixes in sonarqube 26.3.0.120487-r3

Package sonarqube version 26.3.0.120487-r3 fixes 19 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516...

CLEANSTART-2026-YD42613 Security fixes in sonarqube 25.12.0.117093-r1

Package sonarqube version 25.12.0.117093-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-DC00064 Security fixes in sonarqube 26.3.0.120487-r1

Package sonarqube version 26.3.0.120487-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-XA75352 Security fixes in sonarqube 25.12.0.117093-r3

Package sonarqube version 25.12.0.117093-r3 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

CLEANSTART-2026-RI78634 Security fixes in sonarqube 26.4.0.121862-r0

Package sonarqube version 26.4.0.121862-r0 fixes 8 vulnerabilities: CVE-2025-68161, CVE-2026-34479, CVE-2026-33870, CVE-2026-33871, CVE-2025-48924...

CLEANSTART-2026-KA96375 Security fixes in sonarqube 26.4.0.121862-r2

Package sonarqube version 26.4.0.121862-r2 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

GHSA-574F-3G2M-X479 vulnerabilities

Vulnerabilities for packages: logstash-fips, sonarqube, logstash, opensearch, hadoop-fips...

CVE-2025-14813 vulnerabilities

Vulnerabilities for packages: logstash-fips, sonarqube, logstash, opensearch, hadoop-fips...

CVE-2025-14813 vulnerabilities

Vulnerabilities for packages: logstash, sonarqube...

GHSA-574F-3G2M-X479 vulnerabilities

Vulnerabilities for packages: logstash, sonarqube...

CLEANSTART-2026-QW49365 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial o...

Multiple security vulnerabilities affect the sonarqube package. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation CAPEC-130 causing a persistent denial of service OOM crash via submission of...