Sonarsource Sonarqube-Scan-Action
2 CVEs affecting Sonarsource Sonarqube-Scan-Action. Latest disclosed: 2025-09-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-58178 | High | 7.8 | 2025-09-02 | SonarQube Server and Cloud is a static analysis solution for continuous code quality and security inspection. In versions 4 to 5.3.0, a command injection vulne… |
CVE-2025-59844 | | 2025-09-26 | SonarQube Server and Cloud is a static analysis solution for continuous code quality and security inspection. A command injection vulnerability exists in Sonar… |