What’s Vulnerable › Products

SonarSource sonarqube-scan-action vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your SonarSource sonarqube-scan-action version is affected

Latest SonarSource sonarqube-scan-action vulnerabilities

• CVE-2025-59844 — Argument injection vulnerability in SonarQube Scan Action (CVSS 7.7)
• CVE-2025-58178 — Command Injection via sonarqube-scan-action GitHub Action (CVSS 7.8)