Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Sonatype Container Security Solutions | 0-Doubt

Home
Vendors
Sonatype
Sonatype Container Security Solutions

Home
Vendors
Container Security
Sonatype Container Security Solutions

Sonatype Container Security Solutions

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 61 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Container security platform for vulnerability scanning and policy enforcement

by Sonatype · sonatype.com · source ↗

Screenshots

1

Sonatype Container Security Solutions — screenshot

Known CVEs (61)3 new

CVE-2026-97712 ↗new2026
Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than int…
CVE-2026-97667 ↗new2026
Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the brows…
↗

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Container Security products

SUSE Security Full Lifecycle Container Security · SUSE
Sec1 ConTek · Sec1
SecLogic Kubernetes Security · SecLogic
Software Supply Chain Security Platform · RapidFort
StackRox · StackRox
Sysdig Container and Kubernetes Security · Sysdig
Trend Micro Container Security · Trend Micro
Xcitium Kubernetes Security Posture Management · Xcitium

CVE-2026-97666

new2026

Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn …

…and 58 more · see all on the vendor page →