JetBrains

Records788All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical84CVSS 9.0–10.0

CVSS high249CVSS 7.0–8.9

Exploited now

JetBrains records in CISA KEV

TI-2026-45031 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2026-08-05 TI-2024-18054 JetBrains TeamCity Relative Path Traversal Vulnerability CRITICAL 89KEV 2026-04-20 TI-2024-18053 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 100KEV 2024-03-07 TI-2023-22884 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 100KEV 2023-10-04

Components

Products in the NVD configurations · select one to filter the records

Teamcity 283 records CRITICAL Youtrack 157 records MEDIUM Intellij Idea 77 records HIGH Hub 37 records MEDIUM Ktor 21 records MEDIUM Pycharm 12 records HIGH Toolbox 11 records MEDIUM Rider 9 records HIGH

Records

12 records in Pycharm · all components

TI-2024-24589 CVE-2024-37051 · GHSA-vfg9-hgrq-rjhq

Insufficiently protected credentials in JetBrains IntelliJ IDEA

HIGH 75

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4,…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.04883 Published 2024-06-10 Fixed in 2023.1.7, 2023.2.7 +19 CWE-522

TI-2021-20971 CVE-2021-45977 · GHSA-pvh2-w6q4-6hqm

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional…

MEDIUM 44

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CL…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01083 Published 2022-02-25 No fix listed

TI-2026-52746 CVE-2026-75060 · GHSA-5686-8wvm-pm8w

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools

LOW 38

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00182 Published 2026-08-17 Fixed in 2026.2.1 CWE-306

TI-2026-46948 CVE-2026-65908 · GHSA-2j8g-fr3j-fp7c

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious…

LOW 38

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00185 Published 2026-07-23 Fixed in 2026.1.4, 2026.2 CWE-829

TI-2026-20893 CVE-2026-25847 · GHSA-rhp6-v5v3-v7p4

In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible

LOW 37

In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00231 Published 2026-02-09 Fixed in 2025.3.2 CWE-79

TI-2020-09386 CVE-2020-11694 · GHSA-g644-679q-jjcf

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service…

LOW 37

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01863 Published 2020-04-10 No fix listed CWE-312

TI-2019-11156 CVE-2019-14958 · GHSA-vm2v-9gwc-qh4r

JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the…

LOW 37

JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0193 Published 2019-10-02 No fix listed CWE-770

TI-2021-10620 CVE-2021-30005 · GHSA-qv38-pj4q-67hh

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of…

LOW 36

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00889 Published 2021-05-11 No fix listed CWE-345

TI-2022-12181 CVE-2022-29821 · GHSA-hjcx-6r9f-f974

In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible

LOW 33

In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.00234 Published 2022-04-28 Fixed in 2022.1 CWE-94

TI-2026-36557 CVE-2026-49384 · GHSA-94rv-v2wh-r9wx

In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible

LOW 26

In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00181 Published 2026-05-29 Fixed in 2025.3.4 CWE-79

TI-2026-52745 CVE-2026-75059 · GHSA-vw8w-wwww-3834

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible

LOW 22

In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00179 Published 2026-08-17 Fixed in 2026.2.1 CWE-79

TI-2022-12180 CVE-2022-29820 · GHSA-vvwg-mm2q-wvgr

In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible

LOW 17

In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.00389 Published 2022-04-28 Fixed in 2022.1 CWE-1327

Open these records in search →