sonarqube
packaged by Chainguard

Last changed

Request a free trial

Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.

Tags

CVE ID	Severity	Package	Version
CVE-2026-56819	High	netty-codec-http2	4.1.135.Final
CVE-2024-41909	High	sshd-common	2.9.2
CVE-2026-77420	Medium	jline-reader	3.21.0
CVE-2026-49844	Medium	log4j-api	2.25.4
CVE-2026-64607	Medium	httpclient5	5.6.1
CVE-2026-90781	Medium	alsa-lib	1.2.16.1-r2
CVE-2026-59899	Medium	netty-codec-http	4.1.135.Final
CVE-2026-59899	Medium	netty-codec-http	4.1.135.Final
CVE-2026-77117	Medium	glibc-2.44	2.44-r6
CVE-2026-80489	Medium	glibc-2.44	2.44-r6
CVE-2026-59903	Medium	netty-codec-http	4.1.135.Final
CVE-2026-59899	Medium	netty-codec-http	4.1.135.Final
CVE-2026-59900	Medium	netty-codec-http2	4.1.135.Final
CVE-2025-22227	Medium	reactor-netty-http	1.0.45
CVE-2026-8674	Medium	glibc-2.44	2.44-r6
CVE-2026-59903	Medium	netty-codec-http	4.1.135.Final
CVE-2026-59903	Medium	netty-codec-http	4.1.135.Final
CVE-2026-89092	Medium	glibc-2.44	2.44-r6
CVE-2023-35887	Medium	sshd-common	2.9.2
CVE-2026-59889	Medium	jackson-databind	3.2.0
CVE-2020-36843	Medium	eddsa	0.3.0
CVE-2026-9828	Low	logback-core	1.5.32
CVE-2026-10532	Low	logback-core	1.5.32

Last updated:

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.

sonarqube
packaged by Chainguard

The trusted source for open source

Product

Solutions

Customers

Resources

Company