Vulnerabilities in JetBrains

545 results
CVE-2025-68163LOWIn JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall pageEPSS 0.2%CVE-2026-123321HIGHIn JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projectsEPSS 0.2%CVE-2025-29903MEDIUMIn JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possibleEPSS 0.2%CVE-2026-123331MEDIUMIn JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articlesEPSS 0.2%CVE-2025-29932MEDIUMIn JetBrains GoLand before 2025.1 an XXE during debugging was possibleEPSS 0.2%CVE-2026-65908HIGHIn JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project openEPSS 0.2%CVE-2026-64811HIGHIn JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container confiEPSS 0.2%CVE-2026-64807HIGHIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configurationEPSS 0.2%CVE-2026-86504HIGHIn JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code executEPSS 0.2%CVE-2022-29812LOWIn JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficientEPSS 0.2%CVE-2026-28195MEDIUMIn JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurationsEPSS 0.2%CVE-2026-111096MEDIUMIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possibleEPSS 0.2%CVE-2026-75060HIGHIn JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP toolsEPSS 0.2%CVE-2026-49384MEDIUMIn JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possibleEPSS 0.2%CVE-2025-54528MEDIUMIn JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowEPSS 0.2%CVE-2025-54536MEDIUMIn JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpointEPSS 0.2%CVE-2026-123329MEDIUMIn JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actionsEPSS 0.2%CVE-2026-123330MEDIUMIn JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settingsEPSS 0.2%CVE-2026-75059MEDIUMIn JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possibleEPSS 0.2%CVE-2026-123286MEDIUMIn JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session tokenEPSS 0.2%