Security Vulnerabilities
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.
CVSS Score
9.4
EPSS Score
0.058
Published
2026-08-17
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request validation in GraphQL multiplex query handling.
CVSS Score
7.1
EPSS Score
0.005
Published
2026-08-17
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible
CVSS Score
4.4
EPSS Score
0.001
Published
2026-08-17
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools
CVSS Score
8.4
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects
CVSS Score
3.6
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
CVSS Score
5.4
EPSS Score
0.002
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects
CVSS Score
6.3
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
CVSS Score
5.5
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
CVSS Score
7.8
EPSS Score
0.002
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
CVSS Score
6.2
EPSS Score
0.001
Published
2026-08-17