VDB
CGA-mhg4-342v-w7xq
CGA-mhg4-342v-w7xq
REJECTED
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chainguard | sonar-scanner-cli | 0, 0, 0 |
| Wolfi | sonar-scanner-cli | 0, 0, 0 |
| Wolfi | sonar-scanner-cli-compat | 0, 0, 0 |
| Chainguard | sonar-scanner-cli-compat | 0, 0, 0 |
Exploit Intelligence
- Apache's commons-lang2 v2.6 with a backported fix for CVE-2025-48924 (github-poc)
- pom-common.xml (github-poc)
- VulnerableDependencies.kt (github-poc)
- EncryptionUtil.java (github-poc)
- druid-612f0710.json (github-poc)
- dockerscan.yml (github-poc)
- owasp-suppressions-pending.xml (github-poc)
- pom.xml (github-poc)
- pom.xml (github-poc)
- dependencyCheckSuppression.xml (github-poc)
…and 3 more exploits
Timeline
- Jan 28, 2026 CVE Rejected