Vulnerabilities

TI-2026-46336 CVE-2026-64807 · GHSA-r7gx-4q54-2wrv

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration

LOW 35

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00185 Published 2026-07-23 Fixed in 2026.2 CWE-829

TI-2026-46335 CVE-2026-64806 · GHSA-cp73-r8rc-6v5m

LOW 38

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-07-23 Fixed in 2026.2 CWE-829

TI-2026-46334 CVE-2026-64805 · GHSA-662q-mj5f-wv34

LOW 38

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-07-23 Fixed in 2026.2 CWE-829

TI-2026-46333 CVE-2026-64804 · GHSA-x88m-wx27-x7m2

LOW 38

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-07-23 Fixed in 2026.2 CWE-829