product of jetbrains

intellij idea

8 thingsrelated by NVD

Severity

high 3 medium 5

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects CVE-2026-100256	Severity high
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers CVE-2026-75058	Severity medium
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log CVE-2026-75057	Severity medium
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible CVE-2026-75056	Severity high
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE CVE-2026-75055	Severity medium
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects CVE-2026-75054	Severity medium
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint CVE-2026-75053	Severity medium
In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible CVE-2022-37009	Severity high