WE
Product
WebStorm
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 0Low 0
Watch
Add WebStorm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64806 | 8.4 | Jul 23 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter Affected: before 2026.2 |
| CVE-2026-64805 | 8.4 | Jul 23 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling Affected: before 2026.2 |
| CVE-2026-64804 | 8.4 | Jul 23 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling Affected: before 2026.2 |
| CVE-2026-64807 | 7.8 | Jul 23 | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration Affected: before 2026.2 |
| CVE-2024-52555 | 7.8 | Nov 15 | In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script Affected: before 2024.3.0 |
| CVE-2024-37051 | 7.5 | Jun 10 | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3;… Affected: before 2023.1.6; 2023.2.0 before 2023.2.7; 2023.3.0 before 2023.3.7; 2024.1.0 before 2024.1.4 |
| CVE-2021-31898 | 7.5 | May 11 | In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS Affected: before 2021.1 |
Showing 7