Sonarqube LTA version - Vulnerability Image

SonarQube Server / Community Build
1

Must-share information (formatted with Markdown):

  • which versions are you using (SonarQube Server / Community Build, Scanner, Plugin, and any relevant extension)
    • 2025.1 - enterprise
  • how is SonarQube deployed: zip, Docker, Helm
    • Docker
  • what are you trying to achieve
    • The official images in docker hub has vulnerability. As part of security updates we required invulnerable image in docker hub
  • what have you tried so far to achieve this
    • As i analyzed below images are vulnerable. Since we are using LTA version we required invulnerable image in LTA version.

2025.1.4-enterprise

2025.1-enterprise

2025-lta-enterprise

2

Hi,

I’ve unlisted your topic since you’re reporting a vulnerability. Our responsible disclosure policy asks that you email security@sonarsource.com rather than making public posts. Could you please re-send this to security@sonarsource.com?

 
Thx,