Morning, As we use SonarQube in our estate. I just wanted to query if any aspect of any of the SonarQube releases use any of the Telerik UI libraries, as we have been made aware that in certain (older) versions of this the below vulnerability is present; https://nvd.nist.gov/vuln/detail/CVE-2019-1…

Hello @tomf Welcome to the community! We don’t use Telerik UI libraries and, more generally, we try to carefully review and fix, as soon as possible, each vulnerabilities in components we can use. Eric

Is SonarQube Vulnerable to CVE-2019-18935

SonarQube Server / Community Build

tomf (Tom Fawley) February 5, 2020, 2:02pm 4

Thanks Eric! =)

Tom

Topic		Replies	Views
Is there "official" sonarqube documentation that states version 9.9 is NOT impacted by CVE-2022-4288 SonarQube Server / Community Build	5	909	May 24, 2023
Depencencies' vulnerabilities on Sonarqube Community 10.0.0 SonarQube Server / Community Build	5	389	June 8, 2023
Is SonarQube affected by the polyfill.io CVE? SonarQube Server / Community Build	6	332	July 5, 2024
CVE-2022-42889 effect on SonarQube SonarQube Server / Community Build security , cve	27	6828	November 25, 2022
CVE-2022-22970, CVE-2022-22971 Vulnerabilities in SonarQube 8.9 LTS SonarQube Server / Community Build sonarqube , security , spring , cve	1	1451	May 9, 2023

Is SonarQube Vulnerable to CVE-2019-18935

Related topics