Contact us
DevOps, CI and monitoring

SonarQube vulnerabilities

Check any version of SonarQube by SonarSource for known vulnerabilities, ranked by real-world exploitation and severity, with the version that fixes each one. Free, no account.

SonarSource Matched by product name through NVD 0 versions checked

Checked against OSV, NVD and Red Hat, then ranked by real-world exploitation (CISA KEV) and exploit probability (EPSS). 5 free checks a day.

Versions already checked

Nobody has checked a version of SonarQube here yet. Enter yours above: once it finds something, it is listed here for the next person.

Advisories seen for SonarQube

None yet. They appear here as versions are checked.

More in DevOps, CI and monitoring

Source hosting, build servers, containers, orchestration, configuration and monitoring.

All 1,000 products

Do you run SonarQube somewhere?

The Vulnerability Reporter inventories every machine and tells you when a new advisory applies to a version you actually run.