CGA-34v7-vmf2-vwr5

Published

Last updated

https://images.chainguard.dev/security/CGA-34v7-vmf2-vwr5

Package

sonarqube

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2025-37727
GHSA-56r7-h6mw-rcfv

Severity

Unknown

References

https://nvd.nist.gov/vuln/detail/CVE-2025-37727
https://github.com/advisories/GHSA-56r7-h6mw-rcfv

Updates

Status

Pending upstream fix

Impact

The fix versions of the ElasticSearch dependency within SonarQube introduce breaking JDK dependency requirements. Upstream maintainers must implement compatibility change requirements seen here: https://sonarsource.atlassian.net/browse/SONAR-24276

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-34v7-vmf2-vwr5

Severity

References

Updates

Product

Solutions

Customers

Resources

Company