Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
JetBrains CVE-2026-123858
In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123857
In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123856
In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123855
In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123854
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123853
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123852
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123851
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123850
In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123849
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123848
In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123847
In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123846
In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123845
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123844
In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123843
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123842
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123841
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123840
In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123839
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123838
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123837
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123836
In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123835
In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123834
In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123833
In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123832
In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123831
In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123337
In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123336
In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123335
In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collectio
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123334
In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123333
In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123332
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123331
In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123330
In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123329
In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123328
In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123327
In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123326
In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123325
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123324
In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123323
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests witho
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123322
In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123321
In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123320
In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123319
In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123318
In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123317
In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123316
In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123315
In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123314
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client request
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123313
In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123312
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123311
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123310
In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projects
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123309
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123308
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123307
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 unauthenticated connection to an arbitrary host via run configurations was possible
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123306
In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123305
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123304
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123302
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123301
In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possible
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123300
In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123299
In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123298
In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123297
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123296
In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123295
In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123294
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123293
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123292
In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained valid
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123291
In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123290
In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123289
In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123288
In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123287
In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive reports
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123286
In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123285
In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123284
In JetBrains Datalore before 2026.4 improper authorisation on workspace moves allowed view-only collaborators to modify shared content
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123283
In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered account
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123282
In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123281
In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123280
In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123279
In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123278
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123277
In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-123276
In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile
0 CVEs and 0 credit lines.
-
JetBrains CVE-2026-118697
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
JetBrains CVE-2026-118696
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit
-
JetBrains CVE-2026-117530
In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands
0 CVEs and 0 credit lines.
-
Jetbrains CVE-2026-108474
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
0 CVEs and 0 credit lines.