Vulnerabilities in JetBrains

545 results
CVE-2022-37010LOWIn JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missedEPSS 0.2%CVE-2026-100270LOWIn JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configuratEPSS 0.2%CVE-2022-46824MEDIUMIn JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.EPSS 0.2%CVE-2026-123335LOWIn JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the EPSS 0.2%CVE-2026-100261MEDIUMIn JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permissionEPSS 0.2%CVE-2026-75052LOWIn JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projectsEPSS 0.2%CVE-2026-123853HIGHIn JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the buildEPSS 0.2%CVE-2023-38069LOWIn JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain casesEPSS 0.2%CVE-2022-48435LOWIn JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log fileEPSS 0.2%CVE-2026-123838HIGHIn JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form fileEPSS 0.2%CVE-2026-123310MEDIUMIn JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projectsEPSS 0.2%CVE-2026-100280LOWIn JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possibleEPSS 0.2%CVE-2026-123845LOWIn JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projectsEPSS 0.2%CVE-2026-75057MEDIUMIn JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE logEPSS 0.2%CVE-2026-123854MEDIUMIn JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget moduleEPSS 0.2%CVE-2026-123842HIGHIn JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archivesEPSS 0.2%CVE-2026-111095HIGHIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possibleEPSS 0.2%CVE-2025-67739LOWIn JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosureEPSS 0.2%CVE-2025-64682LOWIn JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limitEPSS 0.2%CVE-2026-123319LOWIn JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injectionEPSS 0.2%