Read the docs

JetBrains

Records788All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical84CVSS 9.0–10.0
CVSS high249CVSS 7.0–8.9

Exploited now

JetBrains records in CISA KEV
TI-2026-45031 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2026-08-05TI-2024-18054 JetBrains TeamCity Relative Path Traversal Vulnerability Priority CRITICAL 89KEV 2026-04-20TI-2024-18053 JetBrains TeamCity Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2024-03-07TI-2023-22884 JetBrains TeamCity Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2023-10-04

Components

Products in the NVD configurations · select one to filter the records
Teamcity 283 records CRITICAL Youtrack 157 records MEDIUM Intellij Idea 77 records HIGH Hub 37 records MEDIUM Ktor 21 records MEDIUM Pycharm 12 records HIGH Toolbox 11 records MEDIUM Rider 9 records HIGH

Records

8 records in Goland · all components

TI-2024-24589 CVE-2024-37051 · GHSA-vfg9-hgrq-rjhq

Insufficiently protected credentials in JetBrains IntelliJ IDEA

Priority HIGH 75

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4,…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.04883 Published 2024-06-10 Fixed in 2023.1.7, 2023.2.7 +19 CWE-522
TI-2021-20971 CVE-2021-45977 · GHSA-pvh2-w6q4-6hqm

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional…

Priority MEDIUM 44

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CL…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01083 Published 2022-02-25 No fix listed
TI-2026-46332 CVE-2026-64803 · GHSA-7pxx-mh46-9ggr

Code injection in JetBrains GoLand

Priority LOW 35

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-07-23 Fixed in 2026.2 CWE-94
TI-2026-46331 CVE-2026-64802 · GHSA-qc93-vrfp-c4mv

Code injection in JetBrains GoLand

Priority LOW 35

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-07-23 Fixed in 2026.2 CWE-94
Open these records in search →