AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-75054

JetBrains IntelliJ IDEA: server-side request forgery

JetBrains

CVE-2026-75054 · Published Aug 17, 2026 · updated Sep 11, 2026

Medium6.3
Fix: upgrade to 2026.2.1 or later
JetBrains advisory

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects

Affected versions

PackageAffectedFixed in
IntelliJ IDEA
Product
< 2026.2.12026.2.1
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More JetBrains advisories

All JetBrains
Medium 4.4Aug 17JetBrains PyCharm: code executionCVE-2026-75059fixed in 2026.2.1High 8.4Aug 17JetBrains PyCharm: remote code executionCVE-2026-75060fixed in 2026.2.1High 7.1Aug 17JetBrains YouTrack: denial of serviceCVE-2026-75050fixed in 2026.1.13901 +1High 8.1Aug 17JetBrains YouTrack: missing authorizationCVE-2026-75051fixed in 2026.2.17917Low 3.6Aug 17JetBrains IntelliJ IDEA: command injectionCVE-2026-75052fixed in 2026.2.1Medium 5.4Aug 17JetBrains IntelliJ IDEA: server-side request forgeryCVE-2026-75053fixed in 2026.2.1