Sonar's latest blog posts

Featured Post

Announcing SonarSweep: Improving training data quality for coding LLMs

Recent research from Anthropic has shown that even a small amount of malicious or poor quality training data can have a massively negative impact on a model’s performance, exposing users to significant security and quality issues.

Read More
https://assets-eu-01.kc-usercontent.com:443/55017e37-262d-017b-afd6-daa9468cbc30/c4c32669-0e01-4074-926a-1b257686a90c/sonarsweep_blog_or_press_featured_with_mark__2x.webp
Image for Reflections from DevNexus, the largest Java conference in the U.S.A.
Blog post

Reflections from DevNexus, the largest Java conference in the U.S.A.

Reflections from DevNexus, the largest Java conference in the U.S.A.

Read Blog >

Image for Interview with Sonar Python Developers Part 2
Blog post

Interview with Sonar Python Developers Part 2

Latest Python developments. Interview with Python developers from Sonar.

Read Blog >

Get new blogs delivered directly to your inbox!

Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.

I do not wish to receive promotional emails about upcoming SonarQube updates, new releases, news and events.

By submitting this form, you agree to the storing and processing of your personal data as described in the Privacy Policy and Cookie Policy. You can withdraw your consent by unsubscribing at any time.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Image for Odoo: Get your Content Type right, or else!
Blog post

Odoo: Get your Content Type right, or else!

What do we need content types for anyway? Let's look into how an incorrect content type led to a real-world vulnerability in Odoo, CVE-2023-1434.

Read article >

Image for Interview with Sonar Python Developers Part 1
Blog post

Interview with Sonar Python Developers Part 1

Why should I learn Python language? When should I use Python? Is tooling around Python development mature?

Read Blog >

Image of Sonar Logo and Compiler Explorer integration
Blog post

Sonar ❤️ Compiler Explorer: Write clean C++ code inside your browser

Sonar ❤️ Compiler Explorer: Write clean C++ code inside your browser

Read Blog >

Image for Paying maintainers: the HOWTO
Blog post

Paying maintainers: the HOWTO

It is no surprise that lots of well-intentioned people have failed to figure out how to effectively pay maintainers.

Read article >

Image for Pretalx Vulnerabilities: How to get accepted at every conference
Blog post

Pretalx Vulnerabilities: How to get accepted at every conference

We recently discovered two vulnerabilities in pretalx and found a generic technique to gain code execution from a file write.

Read article >

Image for Another 9 reasons to upgrade to SonarQube Server 9.9 LTS
Blog post

Another 9 reasons to upgrade to SonarQube Server 9.9 LTS

SonarQube Server 9.9 LTS is here! We're back with another 9 reasons you should prioritise upgrading as soon as possible.

Read article >

Image for How bad code destroys developer velocity
Blog post

How bad code destroys developer velocity

When bad code gets overlooked, it can create lasting problems and ultimately impact developer productivity and velocity.

Read Blog >

Image for Announcing SonarQube Server 10.0
Blog Post

Announcing SonarQube Server 10.0

Learn what features - like faster first analysis and better user management with SCIM - are available to you and your teams in SonarQube Server 10.0!

Read article >

Image for It’s a (SNMP) Trap: Gaining Code Execution on LibreNMS
Blog post

It’s a (SNMP) Trap: Gaining Code Execution on LibreNMS

Our researchers discovered a vulnerability in LibreNMS, which could be exploited by attackers to gain RCE by sending a single SNMP trap.

Read article >