PYSEC-2025-12

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Cross-site request forgery allows an unauthenticated attacker to hijack the authentication of a logged in user, and use the web API with the same permissions, including but not...

CVE-2024-53829

CodeChecker exposes a Cross-Site Request Forgery (CSRF) vulnerability in its API affecting CodeChecker up to version 6.24.4. An unauthenticated attacker can leverage a forged request to perform actions with the victim’s session, including adding, removing, or editing products, provided they know ...