Executive brief
Codechecker has an authentication bypass for certain API calls
Affected products
- PyPI codechecker
Junglewise Threat Intelligence
CVE-2026-25660: PYSEC-2026-317 - Codechecker has an authentication bypass for certain API calls
CVE-2026-25660 · Severity: medium · CVSS 4 · Published 2026-06-29
Technologies: codechecker (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1259 - CodeChecker open redirect when URL contains multiple slashes after the product name
- Ericsson CodeChecker stack overflow in ldlogger library
- PYSEC-2025-12 - CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Cross-site request f
- PYSEC-2024-183 - CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication metho
- PYSEC-2024-238 - CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypas