Priority LOW 38
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00182 · Published 2026-08-17 · Fixed in 2026.2.1 CWE-306
Priority LOW 22
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible
CVSS 3.1MEDIUM 4.4· Local · No auth · User interaction · EPSS 0.00179 · Published 2026-08-17 · Fixed in 2026.2.1 CWE-79
Priority LOW 38
In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00185 · Published 2026-07-23 · Fixed in 2026.1.4, 2026.2 CWE-829
Priority LOW 26
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00181 · Published 2026-05-29 · Fixed in 2025.3.4 CWE-79
Priority LOW 37
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible
CVSS 3.1HIGH 8.2· Network · No auth · User interaction · EPSS 0.00231 · Published 2026-02-09 · Fixed in 2025.3.2 CWE-79
Priority HIGH 75
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4,…
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.04883 · Published 2024-06-10 · Fixed in 2023.1.7, 2023.2.7 +19 CWE-522
Priority LOW 33
In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible
CVSS 3.1HIGH 7.7· Local · High privileges · User interaction · EPSS 0.00234 · Published 2022-04-28 · Fixed in 2022.1 CWE-94
Priority LOW 17
In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.00389 · Published 2022-04-28 · Fixed in 2022.1 CWE-1327
Priority MEDIUM 44
JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CL…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01083 · Published 2022-02-25 · No fix listed
Priority LOW 36
In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00889 · Published 2021-05-11 · No fix listed CWE-345
Priority LOW 37
In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01863 · Published 2020-04-10 · No fix listed CWE-312
Priority LOW 37
JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0193 · Published 2019-10-02 · No fix listed CWE-770
THREATIST.IORead the docs