JetBrains security advisories

113 advisories · 51 critical or high in 12 months · latest Oct 27

Advisories page

60 of 113 advisories

Medium 6.7Oct 27

JetBrains Junie CLI: incomplete denylistCVE-2026-117530fixed in 26.8.17 Medium 4.3Oct 1

JetBrains YouTrack: missing authorizationCVE-2026-103495fixed in 2026.2.19422 Medium 5.4Oct 1

JetBrains YouTrack: insecure direct object referenceCVE-2026-103496fixed in 2026.2.19422 Medium 5.5Oct 1

JetBrains YouTrack: server-side request forgeryCVE-2026-103497fixed in 2026.2.19422 Low 2.0Oct 1

JetBrains YouTrack: cross-site scriptingCVE-2026-103489fixed in 2026.2.19422 High 7.2Oct 1

JetBrains YouTrack: privilege escalationCVE-2026-103490fixed in 2026.2.19422 Medium 6.5Oct 1

JetBrains YouTrack: insecure direct object referenceCVE-2026-103491fixed in 2026.2.19422 Medium 6.5Oct 1

JetBrains YouTrack: denial of serviceCVE-2026-103492fixed in 2026.2.19422 High 8.1Oct 1

JetBrains YouTrack: cross-site scriptingCVE-2026-103493fixed in 2026.2.19422 Medium 6.6Oct 1

JetBrains YouTrack: privilege escalationCVE-2026-103494fixed in 2026.2.19422 High 7.1Oct 1

JetBrains YouTrack: missing authorizationCVE-2026-103488fixed in 2026.2.19422 Medium 6.9Sep 30

JetBrains YouTrack: cross-site scriptingCVE-2026-100275fixed in 2026.2.19197 Medium 5.9Sep 30

JetBrains YouTrack: improper authorizationCVE-2026-100276fixed in 2026.2.19197 High 8.9Sep 30

JetBrains YouTrack: improper authorizationCVE-2026-100277fixed in 2026.2.19197 Medium 4.9Sep 30

JetBrains YouTrack: improper authorizationCVE-2026-100278fixed in 2026.2.19197 Medium 6.5Sep 30

JetBrains YouTrack: server-side request forgeryCVE-2026-100279fixed in 2026.2.19197 Low 3.1Sep 30

JetBrains YouTrack: missing authorizationCVE-2026-100280fixed in 2026.2.19197 High 7.7Sep 30

JetBrains YouTrack: insecure direct object referenceCVE-2026-100268fixed in 2026.2.19197 Medium 4.3Sep 30

JetBrains YouTrack: missing authorizationCVE-2026-100269fixed in 2026.2.19197 Low 3.3Sep 30

JetBrains YouTrack: improper authorizationCVE-2026-100270fixed in 2026.2.19197 Low 2.7Sep 30

JetBrains YouTrack: missing authorizationCVE-2026-100271fixed in 2026.2.19197 Medium 4.9Sep 30

JetBrains YouTrack: missing authorizationCVE-2026-100272fixed in 2026.2.19197 High 8.2Sep 30

JetBrains YouTrack: code executionCVE-2026-100273fixed in 2026.2.19197 Medium 6.5Sep 30

JetBrains YouTrack: resource exhaustionCVE-2026-100274fixed in 2026.2.19197 High 7.6Sep 30

JetBrains YouTrack: missing authorizationCVE-2026-100262fixed in 2026.2.18991 Medium 4.7Sep 30

JetBrains YouTrack: cross-site scriptingCVE-2026-100263fixed in 2026.2.18991 Low 2.7Sep 30

JetBrains YouTrack: weakly protected credentialsCVE-2026-100264fixed in 2026.2.18991 Medium 4.8Sep 30

In JetBrains Rider before 2026.2.1 aI AssistantCVE-2026-100265fixed in 2026.2.1 High 7.7Sep 30

JetBrains Hub: missing authorizationCVE-2026-100266fixed in 2026.2.52366 Medium 5.9Sep 30

JetBrains YouTrack: regular expression denial of serviceCVE-2026-100267fixed in 2026.2.19197 High 8.1Sep 30

In JetBrains TeamCity before 2026.2CVE-2026-100255fixed in 2026.2 +2 High 7.8Sep 30

JetBrains IntelliJ IDEA: untrusted functionality includedCVE-2026-100256fixed in 2026.2.3 Medium 4.3Sep 30

JetBrains YouTrack: server-side request forgeryCVE-2026-100257fixed in 2026.2.18991 Medium 4.3Sep 30

JetBrains YouTrack: missing authorizationCVE-2026-100258fixed in 2026.2.18991 Medium 4.3Sep 30

JetBrains YouTrack: improper access controlCVE-2026-100259fixed in 2026.2.18991 Medium 5.3Sep 30

JetBrains YouTrack: insecure defaultCVE-2026-100260fixed in 2026.2.18991 Medium 5.4Sep 30

JetBrains YouTrack: authentication bypassCVE-2026-100261fixed in 2026.2.18991 High 8.8Sep 30

JetBrains TeamCity: code executionCVE-2026-100253fixed in 2026.2 +2 High 8.8Sep 30

JetBrains TeamCity: code executionCVE-2026-100254fixed in 2026.2 +2 Low 3.3Sep 7

JetBrains IntelliJ IDEA: information disclosureCVE-2026-86505fixed in 2026.2.2 Medium 5.9Sep 7

JetBrains GoLand: missing authenticationCVE-2026-86506fixed in 2026.2.2.1 Medium 6.8Sep 7

JetBrains YouTrack: information disclosureCVE-2026-86497fixed in 2026.2.18769 High 7.7Sep 7

JetBrains YouTrack: improper authorizationCVE-2026-86498fixed in 2025.3.160480 +1 Medium 4.3Sep 7

JetBrains YouTrack: missing authorizationCVE-2026-86499fixed in 2026.1.14047 Medium 5.5Sep 7

In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user...CVE-2026-86500fixed in 2026.1.14047 Low 2.8Sep 7

JetBrains IntelliJ IDEA: secrets in logsCVE-2026-86501fixed in 2026.2.2 High 8.4Sep 7

JetBrains IntelliJ IDEA: remote code executionCVE-2026-86502fixed in 2026.2.2 Low 3.3Sep 7

JetBrains IntelliJ IDEA: server-side request forgeryCVE-2026-86503fixed in 2026.2.2 High 7.8Sep 7

JetBrains IntelliJ IDEA: code executionCVE-2026-86504fixed in 2026.2.2 Medium 6.5Sep 7

JetBrains YouTrack: insecure direct object referenceCVE-2026-86488fixed in 2026.2.18634 Medium 6.5Sep 7

JetBrains YouTrack: insecure direct object referenceCVE-2026-86489fixed in 2026.2.18634 Medium 6.5Sep 7

JetBrains YouTrack: insecure permissionsCVE-2026-86490fixed in 2026.2.18634 Low 3.5Sep 7

JetBrains YouTrack: cross-site scriptingCVE-2026-86491fixed in 2026.2.18634 High 8.5Sep 7

In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed...CVE-2026-86492fixed in 2026.2.18634 Medium 6.5Sep 7

JetBrains YouTrack: insecure permissionsCVE-2026-86493fixed in 2026.2.18634 High 7.7Sep 7

JetBrains YouTrack: missing authorizationCVE-2026-86494fixed in 2026.2.18634 Medium 6.5Sep 7

JetBrains YouTrack: missing authorizationCVE-2026-86495fixed in 2026.2.18687 Medium 4.3Sep 7

JetBrains YouTrack: improper access controlCVE-2026-86496fixed in 2026.2.18769 High 8.1Sep 7

JetBrains YouTrack: missing authorizationCVE-2026-86479fixed in 2026.2.18788 +2 Critical 9.8Sep 7

JetBrains Hub: missing authenticationCVE-2026-86480fixed in 2026.2.52442

About JetBrains

Security advisories JetBrains publishes for its own products.

www.jetbrains.com/privacy-security/issues-fixed JetBrains

JetBrains elsewhere on Ibis: Paydays · Releases