PT-2025-39662

Name of the Vulnerable Software and Affected Versions SonarQube versions prior to 6.0.0 Description A command injection issue exists in the SonarQube GitHub Action when workflows pass user-controlled input to the args parameter on Windows runners without proper validation. This bypasses a previou...