Security Vulnerabilities
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path
CVSS Score
7.8
EPSS Score
0.002
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host
CVSS Score
7.5
EPSS Score
0.003
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs
CVSS Score
7.4
EPSS Score
0.002
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 unauthenticated connection to an arbitrary host via run configurations was possible
CVSS Score
6.8
EPSS Score
0.003
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects
CVSS Score
6.3
EPSS Score
0.001
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting
CVSS Score
7.8
EPSS Score
0.002
Published
2026-11-06
In JetBrains Datalore before 2026.4 improper authorisation allowed read the notebook owner's file storage session token
CVSS Score
5.9
EPSS Score
0.002
Published
2026-11-06
In JetBrains Datalore before 2026.4 private notebook files could be downloaded without authentication via published interactive reports
CVSS Score
5.9
EPSS Score
0.003
Published
2026-11-06
In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link
CVSS Score
5.4
EPSS Score
0.006
Published
2026-11-06
In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files
CVSS Score
5.4
EPSS Score
0.002
Published
2026-11-06