AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

JetBrains security advisories

113 advisories across JetBrains

Company profile
Medium 6.7Oct 27JetBrains Junie CLI: incomplete denylistCVE-2026-117530fixed in 26.8.17Medium 4.3Oct 1JetBrains YouTrack: missing authorizationCVE-2026-103495fixed in 2026.2.19422Medium 5.4Oct 1JetBrains YouTrack: insecure direct object referenceCVE-2026-103496fixed in 2026.2.19422Medium 5.5Oct 1JetBrains YouTrack: server-side request forgeryCVE-2026-103497fixed in 2026.2.19422Low 2.0Oct 1JetBrains YouTrack: cross-site scriptingCVE-2026-103489fixed in 2026.2.19422High 7.2Oct 1JetBrains YouTrack: privilege escalationCVE-2026-103490fixed in 2026.2.19422Medium 6.5Oct 1JetBrains YouTrack: insecure direct object referenceCVE-2026-103491fixed in 2026.2.19422Medium 6.5Oct 1JetBrains YouTrack: denial of serviceCVE-2026-103492fixed in 2026.2.19422High 8.1Oct 1JetBrains YouTrack: cross-site scriptingCVE-2026-103493fixed in 2026.2.19422Medium 6.6Oct 1JetBrains YouTrack: privilege escalationCVE-2026-103494fixed in 2026.2.19422High 7.1Oct 1JetBrains YouTrack: missing authorizationCVE-2026-103488fixed in 2026.2.19422Medium 6.9Sep 30JetBrains YouTrack: cross-site scriptingCVE-2026-100275fixed in 2026.2.19197Medium 5.9Sep 30JetBrains YouTrack: improper authorizationCVE-2026-100276fixed in 2026.2.19197High 8.9Sep 30JetBrains YouTrack: improper authorizationCVE-2026-100277fixed in 2026.2.19197Medium 4.9Sep 30JetBrains YouTrack: improper authorizationCVE-2026-100278fixed in 2026.2.19197Medium 6.5Sep 30JetBrains YouTrack: server-side request forgeryCVE-2026-100279fixed in 2026.2.19197Low 3.1Sep 30JetBrains YouTrack: missing authorizationCVE-2026-100280fixed in 2026.2.19197High 7.7Sep 30JetBrains YouTrack: insecure direct object referenceCVE-2026-100268fixed in 2026.2.19197Medium 4.3Sep 30JetBrains YouTrack: missing authorizationCVE-2026-100269fixed in 2026.2.19197Low 3.3Sep 30JetBrains YouTrack: improper authorizationCVE-2026-100270fixed in 2026.2.19197Low 2.7Sep 30JetBrains YouTrack: missing authorizationCVE-2026-100271fixed in 2026.2.19197Medium 4.9Sep 30JetBrains YouTrack: missing authorizationCVE-2026-100272fixed in 2026.2.19197High 8.2Sep 30JetBrains YouTrack: code executionCVE-2026-100273fixed in 2026.2.19197Medium 6.5Sep 30JetBrains YouTrack: resource exhaustionCVE-2026-100274fixed in 2026.2.19197High 7.6Sep 30JetBrains YouTrack: missing authorizationCVE-2026-100262fixed in 2026.2.18991Medium 4.7Sep 30JetBrains YouTrack: cross-site scriptingCVE-2026-100263fixed in 2026.2.18991Low 2.7Sep 30JetBrains YouTrack: weakly protected credentialsCVE-2026-100264fixed in 2026.2.18991Medium 4.8Sep 30In JetBrains Rider before 2026.2.1 aI AssistantCVE-2026-100265fixed in 2026.2.1High 7.7Sep 30JetBrains Hub: missing authorizationCVE-2026-100266fixed in 2026.2.52366Medium 5.9Sep 30JetBrains YouTrack: regular expression denial of serviceCVE-2026-100267fixed in 2026.2.19197High 8.1Sep 30In JetBrains TeamCity before 2026.2CVE-2026-100255fixed in 2026.2 +2High 7.8Sep 30JetBrains IntelliJ IDEA: untrusted functionality includedCVE-2026-100256fixed in 2026.2.3Medium 4.3Sep 30JetBrains YouTrack: server-side request forgeryCVE-2026-100257fixed in 2026.2.18991Medium 4.3Sep 30JetBrains YouTrack: missing authorizationCVE-2026-100258fixed in 2026.2.18991Medium 4.3Sep 30JetBrains YouTrack: improper access controlCVE-2026-100259fixed in 2026.2.18991Medium 5.3Sep 30JetBrains YouTrack: insecure defaultCVE-2026-100260fixed in 2026.2.18991Medium 5.4Sep 30JetBrains YouTrack: authentication bypassCVE-2026-100261fixed in 2026.2.18991High 8.8Sep 30JetBrains TeamCity: code executionCVE-2026-100253fixed in 2026.2 +2High 8.8Sep 30JetBrains TeamCity: code executionCVE-2026-100254fixed in 2026.2 +2Low 3.3Sep 7JetBrains IntelliJ IDEA: information disclosureCVE-2026-86505fixed in 2026.2.2Medium 5.9Sep 7JetBrains GoLand: missing authenticationCVE-2026-86506fixed in 2026.2.2.1Medium 6.8Sep 7JetBrains YouTrack: information disclosureCVE-2026-86497fixed in 2026.2.18769High 7.7Sep 7JetBrains YouTrack: improper authorizationCVE-2026-86498fixed in 2025.3.160480 +1Medium 4.3Sep 7JetBrains YouTrack: missing authorizationCVE-2026-86499fixed in 2026.1.14047Medium 5.5Sep 7In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user...CVE-2026-86500fixed in 2026.1.14047Low 2.8Sep 7JetBrains IntelliJ IDEA: secrets in logsCVE-2026-86501fixed in 2026.2.2High 8.4Sep 7JetBrains IntelliJ IDEA: remote code executionCVE-2026-86502fixed in 2026.2.2Low 3.3Sep 7JetBrains IntelliJ IDEA: server-side request forgeryCVE-2026-86503fixed in 2026.2.2High 7.8Sep 7JetBrains IntelliJ IDEA: code executionCVE-2026-86504fixed in 2026.2.2Medium 6.5Sep 7JetBrains YouTrack: insecure direct object referenceCVE-2026-86488fixed in 2026.2.18634Medium 6.5Sep 7JetBrains YouTrack: insecure direct object referenceCVE-2026-86489fixed in 2026.2.18634Medium 6.5Sep 7JetBrains YouTrack: insecure permissionsCVE-2026-86490fixed in 2026.2.18634Low 3.5Sep 7JetBrains YouTrack: cross-site scriptingCVE-2026-86491fixed in 2026.2.18634High 8.5Sep 7In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed...CVE-2026-86492fixed in 2026.2.18634Medium 6.5Sep 7JetBrains YouTrack: insecure permissionsCVE-2026-86493fixed in 2026.2.18634High 7.7Sep 7JetBrains YouTrack: missing authorizationCVE-2026-86494fixed in 2026.2.18634Medium 6.5Sep 7JetBrains YouTrack: missing authorizationCVE-2026-86495fixed in 2026.2.18687Medium 4.3Sep 7JetBrains YouTrack: improper access controlCVE-2026-86496fixed in 2026.2.18769High 8.1Sep 7JetBrains YouTrack: missing authorizationCVE-2026-86479fixed in 2026.2.18788 +2Critical 9.8Sep 7JetBrains Hub: missing authenticationCVE-2026-86480fixed in 2026.2.52442

The newest 60. Each project page has the full list.

About JetBrains

JetBrains s.r.o. is a global software development private limited company which makes tools for programmers and project managers. The company has its headquarters in Amsterdam, and has offices in China, Europe, and the United States.

Elsewhere on Ibis: Paydays · Releases