SonarSource sonarqube-scan-action

• CVE-2025-59844 High 7.7 Argument injection vulnerability in SonarQube Scan Action 1.5%
• CVE-2025-58178 High 7.8 Command Injection via sonarqube-scan-action GitHub Action 1.1%