PatchTheCVEwebstorm vulnerabilities and fixes
Recent CVEs affecting webstorm, with upgrade or downgrade steps. 4 tracked.
webstorm has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-07-23. Highest priority: CVE-2026-64804 (score 31/100).
- CVE-2026-64804 HIGH 8.4 UPGRADE In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via pr
- CVE-2026-64805 HIGH 8.4 UPGRADE In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via pr
- CVE-2026-64806 HIGH 8.4 UPGRADE In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via th
- CVE-2026-64807 HIGH 7.8 UPGRADE In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter config
FAQ
How do I fix webstorm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webstorm being exploited right now?
None of the tracked webstorm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webstorm CVE should I patch first?
CVE-2026-64804 currently ranks highest (31/100): In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via pr.