Login Request a demo
CO
Product
codechecker
by Ericsson · last CVE Aug 28, 2026
11
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 3High 2Medium 4Low 2
Severity
All severities11Critical3High2Medium4Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add codechecker to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-10081
10.0
40%
Nov 6
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
Affected: through 6.24.1
CVE-2026-25660
9.8
0%
Apr 24
Authentication bypass for certain API calls
Affected: through 6.27.3
CVE-2024-10082
9.0
0%
Nov 6
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
Affected: through 6.24.1
CVE-2024-53829
8.2
0%
Jan 21
Cross-Site Request Forgery in CodeChecker API
Affected: through 6.24.4
CVE-2025-40843
7.8
0%
Oct 28
Buffer overflow in CodeChecker log command
Affected: through 6.26.1
CVE-2023-49793
6.5
1%
Jun 24
Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Affected: < 6.23.0
CVE-2025-1300
6.1
0%
Feb 28
Open redirect in CodeChecker web server
Affected: through 6.24.5
CVE-2021-44217
6.1
2%
Jan 18
In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject…
Affected: through 6.18.0
CVE-2026-58107
5.5
0%
Aug 28
Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun
Affected: before 6.28.3
CVE-2026-58106
2.0
0%
Aug 28
Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation
Affected: through 6.28.2
CVE-2026-58108
1.2
0%
Aug 26
Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB
Affected: 6.26.0 before 6.28.3
Showing 11