CVE-2026-123301

JetBrains IntelliJ IDEA versions prior to 2026.3 are vulnerable to a DOM-based Cross-Site Scripting (XSS) flaw within the OpenAPI preview error view . The underlying cause is the improper neutralization of input during web page generation (CWE-79 ). This vulnerability allows an attacker to execut...

EUVD-2026-118066

In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possible...