sonarsource Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by sonarsource

JSON RSS CSV 🔔 Create Alert Trigger

26 September 2025

Command Injection Vulnerability in SonarQube Server and Cloud by SonarSource
CVE-2025-59844
SonarsourceSonarqube-scan-action7.7HIGH

2 September 2025

Command Injection Vulnerability in SonarQube Server and Cloud by SonarSource
CVE-2025-58178
SonarsourceSonarqube-scan-action7.8HIGH

16 December 2020

Root User Access Vulnerability in SonarQube Docker Images by SonarSource
CVE-2020-35193
SonarsourceSonarqube Docker Image9.8CRITICAL

28 October 2020

Cleartext Credential Exposure in SonarQube by SonarSource
CVE-2020-27986
SonarsourceSonarqubeEPSS 92%7.5HIGH

9 January 2019

Insufficiently Protected Credentials in Jenkins SonarQube Scanner Plugin
CVE-2018-1000425
SonarsourceSonarqube Scanner7.8HIGH