Known Vulnerabilities for products from JetBrains
Listed below are 20 of the newest known vulnerabilities associated with the vendor "JetBrains".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49386 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-49385 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-49384 json | In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible | Not Provided | 2026-05-29 | 2026-06-01 |
| CVE-2026-49383 json | In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible | Not Provided | 2026-05-29 | 2026-06-01 |
| CVE-2026-49382 json | In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin | Not Provided | 2026-05-29 | 2026-06-01 |
| CVE-2026-49381 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-49380 json | In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49379 json | In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49378 json | In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49377 json | In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49376 json | In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49375 json | In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49374 json | In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49373 json | In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49372 json | In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49371 json | In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-49370 json | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests | Not Provided | 2026-05-29 | 2026-06-01 |
| CVE-2026-49369 json | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages | Not Provided | 2026-05-29 | 2026-06-01 |
| CVE-2026-49368 json | In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible | Not Provided | 2026-05-29 | 2026-06-01 |
| CVE-2026-49367 json | In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account | Not Provided | 2026-05-29 | 2026-06-01 |
Known software with vulnerabilities from JetBrains
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Jetbrains | Dotpeek | 10.0 |
| Application | Jetbrains | Goland | 2017.3 |
| Application | Jetbrains | Hub | 1.0.648 |
| Application | Jetbrains | Ideavim | - |
| Application | Jetbrains | Idetalk | 193.4099.10 |
| Application | Jetbrains | Intellij Idea | - |
| Application | Jetbrains | Kotlin | 0.9 |
| Application | Jetbrains | Ktor | 0.0.1 |
| Application | Jetbrains | Mps | - |
| Application | Jetbrains | Omea Reader | 2.2 |
| Application | Jetbrains | Pycharm | - |
| Application | Jetbrains | Resharper | 10.0 |
| Application | Jetbrains | Resharper Ultimate | 2016.1 |
| Application | Jetbrains | Rider | - |
| Application | Jetbrains | Scala | 2019.2.1 |
| Application | Jetbrains | Space | - |
| Application | Jetbrains | Teamcity | 10.0 |
| Application | Jetbrains | Toolbox | - |
| Application | Jetbrains | Upsource | 1.0 |
| Application | Jetbrains | Vim | - |