CVE-2026-64808

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...

CVE-2026-64809

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...

EUVD-2026-48232

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration...

CVE-2026-64806

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter...

CVE-2026-64807

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration...

CVE-2026-64806

CVE-2026-64806 affects JetBrains WebStorm prior to 2026.2. The issue allows arbitrary code execution before granting project trust via the configured Node.js interpreter. It indicates a local attack vector with high impact (C:H/I:H/A:H) and requires no user interaction. Remediation is to upgrade ...

EUVD-2026-48231

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter...

CVE-2026-64804

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling...

EUVD-2026-48228

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK...

CVE-2026-64803

JetBrains GoLand is affected prior to version 2026.2. The vulnerability enables arbitrary code execution before granting project trust via the configured Go SDK, requiring local access and user interaction. Impact is high for confidentiality, integrity, and availability as per CVSS. Remediation: ...

CVE-2026-64804

JetBrains WebStorm is affected by CVE-2026-64804: before version 2026.2, arbitrary code execution could occur before granting project trust when using project-local linter tooling. The NVD entry lists a CVSS v3.1 base score of 8.4 (HIGH), with LOCAL attack vector, no user interaction required, an...

EUVD-2026-48230

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling...

EUVD-2026-48229

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling...

CVE-2026-64805

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling...

CVE-2026-64803

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK...

EUVD-2026-48227

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...

CVE-2026-64802

Technical details about CVE-2026-64802 are not publicly provided in the supplied documents. Monitor for updates from JetBrains and NVD; no specifics on affected versions, vectors, or fixes are available here.

CVE-2026-64802

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...

Malicious code in create-kumo-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172586ef83140a92d732376efb734e45aa09958a7800016aa3c229ccf74c81bf Package presents itself as a create--project scaffolder but ships no scaffolding functionality. The bin/run.js entry, invoked when a user runs npx...

PT-2026-63960

Name of the Vulnerable Software and Affected Versions JetBrains WebStorm versions prior to 2026.2 Description Arbitrary code execution is possible before granting project trust through the configured Node.js interpreter. Recommendations Update JetBrains WebStorm to version 2026.2...