Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 22

When an operator enables store.analysis_statistics_dir, a network client with PRODUCT_STORE permission for a product can call that product's storeAnalysisStatistics Thrift-over-HTTP method.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00313 Published 2026-11-06 Fixed in 6.29.3 CWE-409
Priority LOW 3

The HTML report that plist-to-html, CodeChecker parse --export html and CodeChecker cmd diff --output html generate puts the report message, the checker name and the source file path into a script block through json.dump…

CVSS 4.0N/A 0.0 Network High privileges User interaction EPSS 0.00274 Published 2026-11-06 Fixed in 6.29.3 CWE-79
Priority LOW 23

CodeChecker's web server fails to fully invalidate a session token on logout when the server runs with more than one API worker process (the default).

CVSS 4.0MEDIUM 5.3 Local Low privileges User interaction EPSS 0.00139 Published 2026-11-06 Fixed in 6.29.3 CWE-613