Skip to content
Ericsson Codechecker vulnerabilities
-
ericsson codechecker
Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatistics
CVE-2026-84161
4.9 Medium
-
ericsson codechecker
Stored XSS in the static HTML report export, because json.dumps does not escape the markup character
CVE-2026-84164
0.0 None
-
ericsson codechecker
Session Token Remains Valid After Logout in Multi-Worker Deployments
CVE-2026-84155
5.3 Medium
-
ericsson codechecker
Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun
CVE-2026-58107
5.5 Medium
-
ericsson codechecker
Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation
CVE-2026-58106
2.0 Low
-
ericsson codechecker
Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB
CVE-2026-58108
1.2 Low
-
ericsson codechecker
Authentication bypass for certain API calls
CVE-2026-25660
9.3 Critical
-
ericsson codechecker
Buffer overflow in CodeChecker log command
CVE-2025-40843
Fix available
5.9 Medium
-
ericsson codechecker
Open redirect in CodeChecker web server
CVE-2025-1300
Fix available
6.1 Medium
-
ericsson codechecker
Cross-Site Request Forgery in CodeChecker API
CVE-2024-53829
Fix available
8.2 High
-
ericsson codechecker
codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service
CVE-2024-10082
Fix available
8.7 High
-
ericsson codechecker
codechecker vulnerable to authentication bypass when using specifically crafted URLs
CVE-2024-10081
Fix available
EPSS 39.9%
10.0 Critical
-
ericsson codechecker
Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
CVE-2023-49793
Fix available
6.5 Medium
-
ericsson codechecker
Cross-site Scripting in Ericsson CodeChecker
CVE-2021-44217
Public exploitFix available
6.1 Medium