codechecker — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in codechecker, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-58107	Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRun CWE-409	5.5	Medium	2026-08-28
CVE-2026-58106	Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation CWE-787	2.0	Low	2026-08-28
CVE-2026-58108	Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDB CWE-284	1.2	Low	2026-08-26
CVE-2026-25660	Authentication bypass for certain API calls CWE-290	9.8^AI	Critical ^AI	2026-04-24
CVE-2025-40843	Buffer overflow in CodeChecker log command CWE-121	5.9	Medium	2025-10-28
CVE-2025-1300	Open redirect in CodeChecker web server CWE-601	6.1	Medium	2025-02-28
CVE-2024-53829	Cross-Site Request Forgery in CodeChecker API CWE-352	8.2	High	2025-01-21
CVE-2024-10082	CodeChecker 安全漏洞 CWE-305	8.7	High	2024-11-06
CVE-2024-10081	CodeChecker 安全漏洞 CWE-288	10.0	Critical	2024-11-06
CVE-2023-49793	Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store` CWE-22	6.5	Medium	2024-06-24

All 10 known CVE vulnerabilities affecting codechecker with full Chinese analysis, references, and POCs where available.