sonarqube

SonarQube 持续检查 SonarQube 不仅能够展示应用程序的健康状况，还能突出显示新引入的问题。通过设置质量门（Quality Gate），您可以实现干净代码，从而系统地提升代码质量。 链接 网站 下载 文档 Web 应用源代码 X（推特） SonarSource，SonarQube 的作者 问题跟踪，只读。只有 SonarSource 内部员工可以创建工单。 负责任披露 Next 下一个 SonarQube 版本的实例 有问题或反馈？ 对于支持类问题（“我该怎么做？”、“我遇到了这个错误，为什么？”等），请先阅读文档，然后前往 SonarSource...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

autoSource

AutoSource AutoSourceは、SonarQubeと統合された自動ソースコードレビューフレームワークであり、静的コード分析/レビューを実行できます。SDLC（ソフトウェア開発ライフサイクル）の非常に初期段階で脆弱性を効果的に発見するために使用できます。ユーザーは、フレームワークにGITリポジトリのリンクを指定するだけでコードをスキャンできます。 AutoSourceフレームワークは、すべてのプラットフォーム（MAC、Linux、Windows）でソースコードレビューを実行できます。 インストール 1. AutoSourceリポジトリをシステムにダウンロードします。 2...

sonarcloud-scan

Bitbucket Pipelines Pipe: SonarQube Cloud 扫描 使用 SonarQube Cloud 扫描您的代码，检测超过 25 种编程语言中的错误、漏洞和代码异味。 您的 SonarCloud 帐户必须首先与您的 Bitbucket 团队或个人帐户关联。SonarQube Cloud 对开源项目完全免费。如果您的代码是闭源的，SonarQube Cloud 还提供付费计划来运行私有分析。 注意：对于使用 Maven 或 Gradle 的项目，请直接执行相应的扫描器，而不是使用此管道（参见示例）。 YAML 定义 将以下代码片段添加到您的...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

EUVD-2026-70131

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin versions 2.18.3 and earlier do not restrict URL schemes for dashboard links generated from SonarQube scanner results, permitting the javascript: scheme. This leads to a stored cross-site scripting (XSS) vulnerability exploitable by attackers holding Item/Configure...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

Nest v2026.08.24

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

CLEANSTART-2026-WG27700 Security fixes in sonarqube 26.8.0.126808-r2

Package sonarqube version 26.8.0.126808-r2 fixes 5 vulnerabilities: CVE-2026-59645, CVE-2026-56819, CVE-2026-59900, CVE-2026-59901, ghsa-mfg7-5gfp-c4w3...

CVE-2026-48813

A flaw was found in Flawfinder. An improper input neutralization issue leads to output manipulation, specifically, terminal/ANSI escape sequence injection and XML injection. A malicious filename can inject arbitrary content in the terminal output and improperly sanitized fields such as filenames,...

EUVD-2026-56901

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.6 security update

Important: Red Hat OpenShift GitOps v1.20.6 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10444 Document as known: GitOps deployment fails as Kustomize 5.8.1 HelmChartInflationGenerator omits SonarQube namespace...

CLEANSTART-2026-DC00064 Security fixes in sonarqube 26.3.0.120487-r1

Package sonarqube version 26.3.0.120487-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-XA52912 Security fixes in sonarqube 25.12.0.117093-r0

Package sonarqube version 25.12.0.117093-r0 fixes 2 vulnerabilities: ghsa-qf7c-7r9h-mm92, CVE-2025-68384...

CLEANSTART-2026-VT41102 Security fixes in sonarqube 26.3.0.120487-r3

Package sonarqube version 26.3.0.120487-r3 fixes 19 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516...

CLEANSTART-2026-YD42613 Security fixes in sonarqube 25.12.0.117093-r1

Package sonarqube version 25.12.0.117093-r1 fixes 1 vulnerabilities: CVE-2026-42198...

CLEANSTART-2026-RN50570 Security fixes in sonarqube 26.4.0.121862-r1

Package sonarqube version 26.4.0.121862-r1 fixes 3 vulnerabilities: ghsa-6v53-7c9g-w56r, ghsa-9342-92gg-6v29, ghsa-2m67-wjpj-xhg9...

CLEANSTART-2026-XA75352 Security fixes in sonarqube 25.12.0.117093-r3

Package sonarqube version 25.12.0.117093-r3 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

CLEANSTART-2026-RI78634 Security fixes in sonarqube 26.4.0.121862-r0

Package sonarqube version 26.4.0.121862-r0 fixes 8 vulnerabilities: CVE-2025-68161, CVE-2026-34479, CVE-2026-33870, CVE-2026-33871, CVE-2025-48924...