Skip to contentJetbrains vulnerabilities
Newest
- jetbrains teamcityIn JetBrains TeamCity before 2026.1
2025.11.5 authenticated users could expose server API to...CVE-2026-444138.2 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1...CVE-2026-418827.4 High
- jetbrains junieIn JetBrains Junie before 252.549.29 command execution was possible via malicious project fileCVE-2026-411535.8 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypassCVE-2026-333927.2 High
- jetbrains dataloreIn JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure...CVE-2026-327456.3 Medium
- jetbrains hubIn JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA...CVE-2026-322296.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on...CVE-2026-281962.3 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add...CVE-2026-281954.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flowCVE-2026-281944.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions...CVE-2026-281938.8 High
- jetbrains hubIn JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was...CVE-2026-258489.1 Critical
- jetbrains pycharmIn JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possibleCVE-2026-258478.2 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logsCVE-2026-258466.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote...CVE-2025-682695.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings pageCVE-2025-682685.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub...CVE-2025-682676.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tabCVE-2025-681665.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setupCVE-2025-681655.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection testCVE-2025-681642.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall pageCVE-2025-681633.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project...CVE-2025-681622.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 path traversal was possible via file uploadCVE-2025-677423.8 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 stored XSS was possible via session attributeCVE-2025-677414.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's...CVE-2025-677402.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local...CVE-2025-677393.1 Low
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limitCVE-2025-647732.7 Low
- jetbrains dottrace, resharper, resharper, rider and dottrace +1 more +3 moreIn JetBrains dotTrace before 2025.2.5 local privilege escalation possible via race conditionCVE-2025-644574.2 Medium
- jetbrains resharperIn JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows...CVE-2025-644568.4 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data...CVE-2025-646858.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback formCVE-2025-646844.5 Medium
- jetbrains hubIn JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users APICVE-2025-646835.3 Medium
- jetbrains hubIn JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limitCVE-2025-646822.7 Low
- jetbrains hubIn JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via...CVE-2025-646812.7 Low
- jetbrains junieIn JetBrains Junie before 252.284.66,
251.284.66,
243.284.66,
252.284.61,
251.284.61,
243.284.61,...CVE-2025-594588.3 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on...CVE-2025-594577.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive uploadCVE-2025-59456EPSS 15.5%5.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race conditionCVE-2025-594554.2 Medium
- jetbrains junieIn JetBrains Junie before 252.284.66,
251.284.66,
243.284.66,
252.284.61,
251.284.61,
243.284.61,...CVE-2025-583355.5 Medium
- jetbrains ide servicesIn JetBrains IDE Services before 2025.5.0.1086,
2025.4.2.2164 users without appropriate...CVE-2025-583348.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script filesCVE-2025-577344.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email...CVE-2025-577335.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect...CVE-2025-577327.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram contentCVE-2025-577318.7 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development featureCVE-2025-577305.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic...CVE-2025-577296.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to...CVE-2025-577286.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote referenceCVE-2025-577274.7 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg...CVE-2025-545385.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshotsCVE-2025-545375.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpointCVE-2025-545365.4 Medium
- Show moreLoading…