Hey there.
CVE-2022-45688 - The vulnerable method is not used in SonarQube - Not vulnerable. We will update the dependency anyways in SonarQube 10.1.
In the future, our responsible disclosure policy asks that you email security@sonarsource.com rather than making public posts.