| Sep 7 | JetBrains IntelliJ IDEA: information disclosure Low3.3Sep 7 | Low3.3 | 2026.2.2 |
| Sep 7 | JetBrains GoLand: missing authenticationMedium5.9Sep 7 | Medium5.9 | 2026.2.2.1 |
| Sep 7 | JetBrains YouTrack: information disclosureMedium6.8Sep 7 | Medium6.8 | 2026.2.18769 |
| Sep 7 | JetBrains YouTrack: improper authorizationHigh7.7Sep 7 | High7.7 | 2025.3.160480+1 more |
| Sep 7 | JetBrains YouTrack: missing authorizationMedium4.3Sep 7 | Medium4.3 | 2026.1.14047 |
| Sep 7 | In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user...Medium5.5Sep 7 | Medium5.5 | 2026.1.14047 |
| Sep 7 | JetBrains IntelliJ IDEA: secrets in logsLow2.8Sep 7 | Low2.8 | 2026.2.2 |
| Sep 7 | JetBrains IntelliJ IDEA: remote code executionHigh8.4Sep 7 | High8.4 | 2026.2.2 |
| Sep 7 | JetBrains IntelliJ IDEA: server-side request forgeryLow3.3Sep 7 | Low3.3 | 2026.2.2 |
| Sep 7 | JetBrains IntelliJ IDEA: code executionHigh7.8Sep 7 | High7.8 | 2026.2.2 |
| Sep 7 | JetBrains YouTrack: insecure direct object referenceMedium6.5Sep 7 | Medium6.5 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: insecure direct object referenceMedium6.5Sep 7 | Medium6.5 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: insecure permissionsMedium6.5Sep 7 | Medium6.5 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: cross-site scriptingLow3.5Sep 7 | Low3.5 | 2026.2.18634 |
| Sep 7 | In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed...High8.5Sep 7 | High8.5 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: insecure permissionsMedium6.5Sep 7 | Medium6.5 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: missing authorizationHigh7.7Sep 7 | High7.7 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: missing authorizationMedium6.5Sep 7 | Medium6.5 | 2026.2.18687 |
| Sep 7 | JetBrains YouTrack: improper access controlMedium4.3Sep 7 | Medium4.3 | 2026.2.18769 |
| Sep 7 | JetBrains YouTrack: missing authorizationHigh8.1Sep 7 | High8.1 | 2026.2.18788+2 more |
| Sep 7 | JetBrains Hub: missing authenticationCritical9.8Sep 7 | Critical9.8 | 2026.2.52442 |
| Sep 7 | JetBrains YouTrack: insecure direct object referenceMedium4.3Sep 7 | Medium4.3 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: privilege escalationHigh8.8Sep 7 | High8.8 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: cross-site scriptingMedium5.4Sep 7 | Medium5.4 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: template injectionMedium4.6Sep 7 | Medium4.6 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: spoofingLow3.3Sep 7 | Low3.3 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: missing authenticationLow3.7Sep 7 | Low3.7 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: improper authorizationLow3.1Sep 7 | Low3.1 | 2026.2.18634 |
| Sep 7 | JetBrains YouTrack: improper authenticationCritical9.8Sep 7 | Critical9.8 | 2025.3.161254+1 more |
| Aug 17 | JetBrains PyCharm: code executionMedium4.4Aug 17 | Medium4.4 | 2026.2.1 |
| Aug 17 | JetBrains PyCharm: remote code executionHigh8.4Aug 17 | High8.4 | 2026.2.1 |
| Aug 17 | JetBrains YouTrack: denial of serviceHigh7.1Aug 17 | High7.1 | 2026.1.13901+1 more |
| Aug 17 | JetBrains YouTrack: missing authorizationHigh8.1Aug 17 | High8.1 | 2026.2.17917 |
| Aug 17 | JetBrains IntelliJ IDEA: command injectionLow3.6Aug 17 | Low3.6 | 2026.2.1 |
| Aug 17 | JetBrains IntelliJ IDEA: server-side request forgeryMedium5.4Aug 17 | Medium5.4 | 2026.2.1 |
| Aug 17 | JetBrains IntelliJ IDEA: server-side request forgeryMedium6.3Aug 17 | Medium6.3 | 2026.2.1 |
| Aug 17 | JetBrains IntelliJ IDEA: XML external entityMedium5.5Aug 17 | Medium5.5 | 2026.2.1 |
| Aug 17 | JetBrains IntelliJ IDEA: command injectionHigh7.8Aug 17 | High7.8 | 2026.2.1 |
| Aug 17 | JetBrains IntelliJ IDEA: secrets in logsMedium6.2Aug 17 | Medium6.2 | 2026.1.5 |
| Aug 17 | JetBrains IntelliJ IDEA: XML external entityMedium5.5Aug 17 | Medium5.5 | 2026.2.1 |
| Aug 17 | JetBrains YouTrack: missing authorizationHigh8.1Aug 17 | High8.1 | 2025.3.156085+2 more |
| Aug 17 | JetBrains YouTrack: authentication bypassCritical9.1Aug 17 | Critical9.1 | 2025.3.156085+2 more |
| Aug 17 | JetBrains YouTrack: missing authorizationMedium4.3Aug 17 | Medium4.3 | 2026.2.18112 |
| Aug 17 | JetBrains YouTrack: denial of serviceMedium6.5Aug 17 | Medium6.5 | 2026.2.18177 |
| Aug 17 | JetBrains YouTrack: cross-site scriptingHigh8.2Aug 17 | High8.2 | 2026.2.18068 |
| Aug 17 | JetBrains YouTrack: missing authorizationMedium6.5Aug 17 | Medium6.5 | 2026.1.13903+1 more |
| Aug 17 | JetBrains Ktor: denial of serviceMedium5.9Aug 17 | Medium5.9 | 3.4.1 |
| Jul 27 | JetBrains TeamCity: remote code executionCritical9.8Jul 27 | Critical9.8 | 2026.1.3+1 more |
| Jul 23 | JetBrains TeamCity: code injectionHigh8.8Jul 23 | High8.8 | 2026.1.2+1 more |
| Jul 23 | JetBrains TeamCity: code executionCritical9.1Jul 23 | Critical9.1 | 2026.1.2+1 more |
| Jul 23 | JetBrains PyCharm: code executionHigh8.6Jul 23 | High8.6 | 2026.1.4+1 more |
| Jul 23 | JetBrains IntelliJ IDEA: missing authorizationHigh8.6Jul 23 | High8.6 | 2026.2 |
| Jul 23 | JetBrains IntelliJ IDEA: code injectionHigh8.1Jul 23 | High8.1 | 2026.2 |
| Jul 23 | JetBrains WebStorm: code executionHigh8.4Jul 23 | High8.4 | 2026.2 |
| Jul 23 | JetBrains WebStorm: code executionHigh7.8Jul 23 | High7.8 | 2026.2 |
| Jul 23 | JetBrains PhpStorm: code executionHigh8.4Jul 23 | High8.4 | 2026.2 |
| Jul 23 | JetBrains PhpStorm: code executionHigh8.4Jul 23 | High8.4 | 2026.2 |
| Jul 23 | JetBrains IntelliJ IDEA: cross-site scriptingMedium4.3Jul 23 | Medium4.3 | 2026.2 |
| Jul 23 | JetBrains IntelliJ IDEA: code executionHigh7.8Jul 23 | High7.8 | 2026.2 |
| Jul 23 | JetBrains IntelliJ IDEA: missing authenticationCritical10.0Jul 23 | Critical10.0 | 2026.2 |