Vulnerabilities

TI-2026-46336 CVE-2026-64807 · GHSA-r7gx-4q54-2wrv

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration

LOW 35

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00185 Published 2026-07-23 Fixed in 2026.2 CWE-829

TI-2026-46335 CVE-2026-64806 · GHSA-cp73-r8rc-6v5m

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…

LOW 38

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-07-23 Fixed in 2026.2 CWE-829

TI-2026-46334 CVE-2026-64805 · GHSA-662q-mj5f-wv34

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…

LOW 38

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-07-23 Fixed in 2026.2 CWE-829

TI-2026-46333 CVE-2026-64804 · GHSA-x88m-wx27-x7m2

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…

LOW 38

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-07-23 Fixed in 2026.2 CWE-829

TI-2024-35222 CVE-2024-52555 · GHSA-rg7m-23r6-4m52

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible…

LOW 35

In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00112 Published 2024-11-15 Fixed in 2024.3 CWE-349

TI-2024-24589 CVE-2024-37051 · GHSA-vfg9-hgrq-rjhq

Insufficiently protected credentials in JetBrains IntelliJ IDEA

HIGH 75

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4,…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.04883 Published 2024-06-10 Fixed in 2023.1.7, 2023.2.7 +19 CWE-522

TI-2021-20971 CVE-2021-45977 · GHSA-pvh2-w6q4-6hqm

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional…

MEDIUM 44

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CL…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01083 Published 2022-02-25 No fix listed

TI-2021-11885 CVE-2021-31897 · GHSA-mrcx-3pvh-cm2f

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.

MEDIUM 45

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01541 Published 2021-05-11 No fix listed

TI-2021-11886 CVE-2021-31898 · GHSA-gmr9-5mcv-ccr9

In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.

LOW 34

In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00628 Published 2021-05-11 No fix listed CWE-319

Vulnerabilities

Filters