1021 matches found
fernflower
Fernflower Fernflower is the first actually working analytical decompiler for Java and probably for a high-level programming language in general. Releases are published in the Intellij Community repository. Please send your bug reports and feature requests to the issue tracker in subsystem Java...
CVE-2026-123853
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process...
CVE-2026-123845
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects...
CVE-2026-123844
In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories...
CVE-2026-123847
In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion...
CVE-2026-123848
In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates...
CVE-2026-123846
In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation...
CVE-2026-123849
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers...
CVE-2026-123840
In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs...
CVE-2026-123837
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL...
CVE-2026-123843
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration...
CVE-2026-123842
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives...
CVE-2026-123841
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive...
CVE-2026-123838
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file...
CVE-2026-123839
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model...
CVE-2026-123833
In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects...
CVE-2026-123853
In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process...
CVE-2026-123853
JetBrains IntelliJ IDEA versions prior to 2026.3 and 2026.2.2 are vulnerable to code execution while running in Safe Mode . The root cause involves project-controlled JVM options within the build process, which allows for the inclusion of functionality from an untrusted control sphere (CWE-829 )....
