Login Request a demo
HU
Product
Hub
by JetBrains · last CVE Sep 30, 2026
38
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities38In the news0Timeline
Severity mix
Critical 9High 10Medium 17Low 2
Severity
All severities38Critical9High10Medium17Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Hub to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56142
8.8
1%
Jun 19
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to…
Affected: before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429
CVE-2025-24456
8.8
0%
Jan 21
In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping
Affected: before 2024.3.55417
CVE-2025-64683
7.5
0%
Nov 10
In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API
Affected: before 2025.3.104432
CVE-2022-45471
7.5
1%
Nov 18
In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email address
Affected: before 2022.3.15181
CVE-2022-24327
7.5
1%
Feb 25
In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions
Affected: before 2021.1.13890
CVE-2021-43182
7.5
1%
Nov 9
In JetBrains Hub before 2021.1.13415, a DoS via user information is possible
Affected: before 2021.1.13415
CVE-2021-43180
7.5
1%
Nov 9
In JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible
Affected: before 2021.1.13690
CVE-2021-31901
7.5
1%
May 11
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group
Affected: before 2021.1.13079
CVE-2020-11691
7.5
1%
Apr 22
In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible
Affected: before 2020.1.12099
CVE-2019-12847
7.2
1%
Jul 3
In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the admin user
Affected: before 2018.4.11298
Showing 10