HIGH7.8
PYSEC-2025-100
Quick fix
PYSEC-2025-100 — codechecker: upgrade to the fixed version with the command below.
pip install --upgrade 'codechecker>=6.26.2'Details
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command.
This issue affects CodeChecker: through 6.26.1.
Are you affected?
Enter the version of the package you're using.