|
[Java][S2200] False Negative: Rule does not detect compareTo() result when wrapped in type cast (e.g
|
|
2
|
86
|
May 18, 2026
|
|
[JAVA] S2447 False Negative - null returned from Boolean method via switch expression (Java 17+)
|
|
1
|
71
|
May 14, 2026
|
|
[Java][S6104] False Negative: Does not detect `return null;` in block lambda for computeIfAbsent/com
|
|
2
|
76
|
May 13, 2026
|
|
java:S2637 false negative together with lomboks log annotation
|
|
2
|
47
|
January 30, 2026
|
|
False negative: S4434 LDAPDeserializationCheck
|
|
1
|
43
|
January 5, 2026
|
|
False Negative: NullMarked Class must use Nullable for equals parameter
|
|
2
|
172
|
December 26, 2025
|
|
False Negative - SQL Injection (S3649) from azure functions HttpRequestData in c#
|
|
4
|
91
|
December 9, 2025
|
|
Secret analysis not picking up plaintext passwords in Terraform
|
|
5
|
142
|
August 19, 2025
|
|
S2259 in Community Edition v9.9.5 (build 90363)
|
|
4
|
104
|
July 31, 2025
|
|
FN on S4449 in SonarQube Server for jspecify @NullMarked annotation
|
|
6
|
314
|
May 16, 2025
|
|
False-negative for S2183 in enum values
|
|
1
|
71
|
February 10, 2025
|
|
Pull Request analysis frequently falsely marks issues as resolved or misses issues
|
|
1
|
77
|
February 3, 2025
|
|
Highly strange behaviour of Sonar analysis surrounding usage of a lombok SuperBuilder class
|
|
4
|
313
|
January 31, 2025
|
|
java:S1128: false negative when Lombok log is used
|
|
6
|
1370
|
September 13, 2024
|
|
Scanning embedded SQL calls / FN SQL Injection for Python
|
|
4
|
498
|
May 29, 2024
|
|
False-negative Async suffix reported when the character 'a' or 'A' is in front of the 'Async' suffix
|
|
8
|
622
|
February 2, 2024
|
|
java:S116 does not check fields of test classes
|
|
1
|
565
|
December 15, 2023
|
|
A false negative about the rule RSPEC-3306
|
|
1
|
391
|
September 5, 2023
|
|
False Negative In rule python:S930
|
|
1
|
588
|
February 27, 2023
|
|
SonarQube reporting duplicate code for database entities
|
|
2
|
5044
|
January 23, 2023
|
|
FN about the rule S1068
|
|
1
|
1673
|
December 22, 2022
|
|
@WebService/@WebMethod not recognized as taint source
|
|
1
|
569
|
December 5, 2022
|
|
False Negative pattern not identified in javasecurity-rules
|
|
1
|
569
|
December 2, 2022
|
|
React Native SAST
|
|
1
|
838
|
February 21, 2022
|
|
SonarQube not finding C# issues that other static analysis tools found
|
|
4
|
2126
|
February 2, 2022
|
|
[java] A false negative about the rule RSPEC-4143
|
|
1
|
892
|
December 21, 2021
|
|
[java] A false negative about the rule RSPEC-1862
|
|
1
|
837
|
December 21, 2021
|
|
Make RSPEC-1751 detect if code block
|
|
3
|
955
|
December 17, 2021
|
|
Missed catch of SQL injection in PHP code with SonarQube Developer Edition
|
|
1
|
568
|
December 6, 2021
|
|
SonarQube is not able to find an error
|
|
0
|
439
|
November 12, 2021
|