SonarSource vulnerabilities
3 published CVEs name SonarSource among the affected products.
- 3Published CVEs3 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-62292
In SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users can query the /api/v2/users-management/users endpoint and…
SonarSource · SonarQube
Medium4.3 - CVE-2025-59844
Argument injection vulnerability in SonarQube Scan Action
SonarSource · sonarqube-scan-action
High7.7 - CVE-2025-58178
Command Injection via sonarqube-scan-action GitHub Action
SonarSource · sonarqube-scan-action
High7.8