Skip to content
OpenAdvisories

Package · PyPI

codechecker

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-40843

    Buffer overflow in CodeChecker log command

    CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChe…

    Ericsson CodeChecker codechecker PyPI
  • Medium 6.1
    CVE-2025-1300

    Open redirect in CodeChecker web server

    CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product nam…

    Ericsson CodeChecker codechecker PyPI
  • Medium 6.5
    CVE-2023-49793

    Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`

    CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of `CodeChecker store` are not properly sanitized. An attacker, using a path traversal attack, can…

    Ericsson CodeChecker codechecker PyPI
  • Medium 6.1
    CVE-2021-44217 Public exploit

    Cross-site Scripting in Ericsson CodeChecker

    In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.

    codechecker codechecker-api PyPI