DirectorySecurity AdvisoriesPricing
Sign in
Directory
sonarqube logo

sonarqube

packaged by Chainguard

Last changed
Request a free trial

Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.

Tags
Overview
Comparison
Provenance
Specifications
SBOM
Vulnerabilities
Advisories

Expand
CVE ID
Severity
Package
Version
Last detected
CVE-2026-75595
Critical
netty-handler
4.1.135.Final
CVE-2026-75595
Critical
netty-handler
4.1.135.Final
CVE-2026-75595
Critical
netty-handler
4.1.135.Final
CVE-2024-41909
High
sshd-common
2.9.2
CVE-2026-82209
High
curl
8.22.0-r2
CVE-2026-56819
High
netty-codec-http2
4.1.135.Final
CVE-2023-35887
Medium
sshd-common
2.9.2
CVE-2025-22227
Medium
reactor-netty-http
1.0.45
CVE-2026-59903
Medium
netty-codec-http
4.1.135.Final
CVE-2026-49844
Medium
log4j-api
2.25.4
CVE-2026-64607
Medium
httpclient5
5.6.1
CVE-2026-59899
Medium
netty-codec-http
4.1.135.Final
CVE-2026-59903
Medium
netty-codec-http
4.1.135.Final
CVE-2020-36843
Medium
eddsa
0.3.0
CVE-2026-75596
Medium
netty-handler
4.1.135.Final
CVE-2026-75596
Medium
netty-handler
4.1.135.Final
CVE-2026-59899
Medium
netty-codec-http
4.1.135.Final
CVE-2026-75596
Medium
netty-handler
4.1.135.Final
CVE-2026-59899
Medium
netty-codec-http
4.1.135.Final
CVE-2026-59889
Medium
jackson-databind
3.2.0
CVE-2026-59903
Medium
netty-codec-http
4.1.135.Final
CVE-2026-59900
Medium
netty-codec-http2
4.1.135.Final
CVE-2026-18374
Medium
glibc-2.44
2.44-r6
CVE-2026-10532
Low
logback-core
1.5.32
CVE-2026-9828
Low
logback-core
1.5.32
Last updated:


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.