# Is sonarqube 9.9 LTS is covered with CVE-2022-42889 vulnerability?

**URL:** <https://community.sonarsource.com/t/is-sonarqube-9-9-lts-is-covered-with-cve-2022-42889-vulnerability/92188>\
**Category:** SonarQube Server / Community Build\
**Tags:** sonarqube\
**Created:** [June 8, 2023, 7:50am UTC](https://community.sonarsource.com/t/is-sonarqube-9-9-lts-is-covered-with-cve-2022-42889-vulnerability/92188 "2023-06-08T07:50:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shivaprasadM](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/shivaprasadm/32/45931_2.png) [@shivaprasadM](https://community.sonarsource.com/u/shivaprasadM)\
**Post date:** [June 8, 2023, 7:50am UTC](https://community.sonarsource.com/t/is-sonarqube-9-9-lts-is-covered-with-cve-2022-42889-vulnerability/92188/1 "2023-06-08T07:50:42Z")

</div>

Must-share information (formatted with [Markdown](https://commonmark.org/help/)):

- which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension) - 8.9.9/ 7.1
- how is SonarQube deployed: zip, Docker, Helm - zip
- what are you trying to achieve - installed supported CVE-2022-42889 vulnerability of sonarqube
- what have you tried so far to achieve this - gone through the docs of sonar source and couldn’t find anything related 9.9 LTS

**Do not share screenshots of logs – share the text itself (bonus points for being well-formatted)!**

---

<div class="post-metadata">

**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\
**Post date:** [June 8, 2023, 8:13am UTC](https://community.sonarsource.com/t/is-sonarqube-9-9-lts-is-covered-with-cve-2022-42889-vulnerability/92188/2 "2023-06-08T08:13:05Z")

</div>

Hey there.

The search function is super helpful here. 🙂

[https://community.sonarsource.com/search?q=CVE-2022-42889](https://community.sonarsource.com/search?q=CVE-2022-42889)