PatchTheCEVCVEs published by JetBrains s.r.o.
CVEs published by JetBrains s.r.o. (CVE Numbering Authority). 13 tracked.
- CVE-2026-75050 HIGH 7.1 UPGRADE In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters
- CVE-2026-75048 HIGH 8.2 UPGRADE In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible
- CVE-2026-75051 HIGH 8.1 UPGRADE In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible
- CVE-2026-75060 HIGH 8.4 UPGRADE In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools
- CVE-2026-75049 MEDIUM 6.5 UPGRADE In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles
- CVE-2026-75056 HIGH 7.8 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
- CVE-2026-75054 MEDIUM 6.3 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projec
- CVE-2026-75057 MEDIUM 6.2 UPGRADE In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
- CVE-2026-75053 MEDIUM 5.4 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
- CVE-2026-75055 MEDIUM 5.5 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
- CVE-2026-75058 MEDIUM 5.5 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
- CVE-2026-75059 MEDIUM 4.4 UPGRADE In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible
- CVE-2026-75052 LOW 3.6 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible