75 matches found
PT-2026-63960
Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible before granting project trust through the configured Node.js interpreter. Recommendations Update JetBrains WebStorm to version 2026.2...
PT-2026-63961
Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible through the use of a project-supplied linter configuration. A linter is a tool that analyzes source code to flag programming errors, bugs, stylistic...
CVE-2026-64805: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling...
PT-2026-63959
Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible through project-local package-manager tooling before the user grants trust to the project. Recommendations Update JetBrains WebStorm to version 2026.2...
PT-2026-63958
Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible through project-local linter tooling before the user grants trust to the project. Recommendations Update JetBrains WebStorm to version 2026.2...
CVE-2026-64807: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration...
CVE-2026-64806: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter...
CVE-2026-64804: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling...
CVE-2021-31897
In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...
CVE-2021-31898
In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS...
EUVD-2021-18772
Malware in sbrugna...
CVE-2024-52555
In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...
The vulnerability of the Untrusted Project Mode feature in the JetBrains WebStorm integrated development environment allows a hacker to execute arbitrary code.
The vulnerability of the Untrusted Project Mode feature in the JetBrains WebStorm integrated development environment involves loading unreliable external data alongside reliable data. Exploiting this vulnerability allows an attacker to execute arbitrary code...
JetBrains WebStorm Installed (Linux)
Binary data jetbrainswebstormnixinstalled.nbin...
JetBrains WebStorm Installed (Mac OS X)
Binary data jetbrainswebstormmacosinstalled.nbin...
JetBrains WebStorm < 2024.3 Code Execution
The version of JetBrains WebStorm installed on the remote host is prior to 2024.3 . It is, therefore, affected by a code execution vulnerability as referenced in the vendor advisory. Code Execution can occur in Untrusted Project mode via specifically constructed type definitions in the installer...
JetBrains webstorm code execution vulnerability
JetBrains webstorm is an integrated development environment IDE for JavaScript and TypeScript development. A code execution vulnerability exists in JetBrains webstorm, which originates from installer scripts via type definition, and can be exploited by an attacker to execute code in untrusted...
JetBrains WebStorm Installed (Windows)
Binary data jetbrainswebstormwininstalled.nbin...
