Security Vulnerabilities
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter
CVSS Score
8.4
EPSS Score
0.001
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking
CVSS Score
4.3
EPSS Score
0.001
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration
CVSS Score
7.8
EPSS Score
0.001
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
CVSS Score
10.0
EPSS Score
0.004
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
CVSS Score
10.0
EPSS Score
0.004
Published
2026-07-23
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
CVSS Score
3.5
EPSS Score
0.005
Published
2026-07-23
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration
CVSS Score
7.8
EPSS Score
0.001
Published
2026-07-23
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK
CVSS Score
7.8
EPSS Score
0.001
Published
2026-07-23
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling
CVSS Score
8.4
EPSS Score
0.001
Published
2026-07-23
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling
CVSS Score
8.4
EPSS Score
0.001
Published
2026-07-23