PyPIPackage

codechecker

8 known vulnerabilities (2 critical, 2 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release: 6.29.3 (Nov 5, 2026): no advisory affects it
Newest unaffected release: 6.29.3 (Nov 5, 2026), the latest release
Advisories: 8 · 2 critical, 2 high, 3 medium

Weekly downloads: 16.1K
Dependents: 1
Releases: 39 since 6.16.0 (Jun 4, 2021)
Registry: PyPI
Releases read: Nov 8, 2026

Version timeline

CVE-2026-25660
Affects 6.16.0a1 to 6.27.3 (6.28.0 is outside it)
CVE-2025-40843
Affects 6.16.0a1 to 6.26.1 (6.26.2 is outside it)
CVE-2025-1300
Affects 6.16.0a1 to 6.24.4 (6.25.0 is outside it)
CVE-2024-53829
Affects 6.16.0a1 to 6.24.4 (6.25.0 is outside it)
CVE-2024-10082
Affects 6.16.0a1 to 6.24.1 (6.24.2 is outside it)
CVE-2024-10081
Affects 6.16.0a1 to 6.24.1 (6.24.2 is outside it)
CVE-2023-49793
Affects 6.16.0a1 to 6.23.0rc2 (6.23.0 is outside it)
CVE-2021-44217
Affects 6.16.0a1 to 6.18.1 (6.18.2 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 8

CVE-2026-25660Critical 9.3
Authentication bypass for certain API calls
Affected: through 6.27.3.
Fixed in 6.28.0 (released May 15, 2026, 21 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 6.29.3, is not affected.
CVE-2025-40843Medium 5.9
Buffer overflow in CodeChecker log command
Affected: fixed in 6.26.2.
Fixed in 6.26.2 (released Sep 22, 2025, 36 days before disclosure).
The latest release, 6.29.3, is not affected.
CVE-2025-1300Medium 6.1
Open redirect in CodeChecker web server
Affected: fixed in 6.24.6.
Fixed in 6.25.0 (released Mar 20, 2025, 20 days after disclosure, the advisory names 6.24.6, which was never published).
The latest release, 6.29.3, is not affected.
CVE-2024-53829High 8.2
Cross-Site Request Forgery in CodeChecker API
Affected: fixed in 6.24.5; fixed in 6.25.0.
Fixed in 6.25.0 (released Mar 20, 2025, 58 days after disclosure).
The latest release, 6.29.3, is not affected.
CVE-2024-10082High 8.7
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Affected: fixed in 6.24.2.
Fixed in 6.24.2 (released Oct 18, 2024, 19 days before disclosure).
The latest release, 6.29.3, is not affected.
CVE-2024-10081Critical 10.0
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Affected: fixed in 6.24.2.
Fixed in 6.24.2 (released Oct 18, 2024, 19 days before disclosure).
The latest release, 6.29.3, is not affected.
CVE-2023-49793Medium 6.5
Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
Affected: fixed in 6.23.0.
Fixed in 6.23.0 (released Dec 8, 2023, 199 days before disclosure).
The latest release, 6.29.3, is not affected.
CVE-2021-44217Unrated
In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer…
Affected: fixed in 6.18.2.
Fixed in 6.18.2 (released Jan 14, 2022, 4 days before disclosure).
The latest release, 6.29.3, is not affected.