CVE-2026-64805: Inclusion of Functionality from Untrusted Control Sphere

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling...