35021 matches found
CVE-2026-64802
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...
EUVD-2026-48227
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...
Malicious Package
Overview create-kumo-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in create-kumo-project (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172586ef83140a92d732376efb734e45aa09958a7800016aa3c229ccf74c81bf Package presents itself as a create--project scaffolder but ships no scaffolding functionality. The bin/run.js entry, invoked when a user runs npx...
PT-2026-63962
Name of the Vulnerable Software and Affected Versions JetBrains PhpStorm versions prior to 2026.2 Description Arbitrary code execution is possible through project tooling before the user grants trust to the project. Recommendations Update JetBrains PhpStorm to version 2026.2...
PT-2026-63965
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2 Description Arbitrary code execution is possible through the development container configuration before the user grants trust to the project. Recommendations Update JetBrains IntelliJ IDEA to...
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers across US Critical Infrastructure
The authoring agencies urgently warn U.S. organizations of ongoing Iranian-affiliated cyber targeting of internet-connected operational technology OT devices, including programmable logic controllers PLCs. These actions disrupted PLCs across several U.S. critical infrastructure sectors through...
PT-2026-63963
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...
PT-2026-63957
Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.2 Description Arbitrary code execution is possible before granting project trust through the configured Go SDK. Recommendations Update JetBrains GoLand to version 2026.2...
PT-2026-63958
Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible through project-local linter tooling before the user grants trust to the project. Recommendations Update JetBrains WebStorm to version 2026.2...
CVE-2026-64805: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling...
CVE-2026-64808: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...
CVE-2026-65908: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...
PT-2026-63960
Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible before granting project trust through the configured Node.js interpreter. Recommendations Update JetBrains WebStorm to version 2026.2...
PT-2026-63961
Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible through the use of a project-supplied linter configuration. A linter is a tool that analyzes source code to flag programming errors, bugs, stylistic...
CVE-2026-64804: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling...
PT-2026-63956
Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.2 Description Arbitrary code execution is possible within the Go Modules integration before the user grants project trust. Recommendations Update JetBrains GoLand to version 2026.2...
PT-2026-63959
Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible through project-local package-manager tooling before the user grants trust to the project. Recommendations Update JetBrains WebStorm to version 2026.2...
GoLand -- Multiple vulnerabilities
https://www.jetbrains.com/privacy-security/issues-fixed/ reports: In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default...