CVE-2026-49372

CVE-2026-49372 affects JetBrains TeamCity prior to 2026.1, with an unauthenticated SSRF via build status disclosed (noted as of 2025.11.5). The available sources confirm the vulnerability class (SSRF) and the affected product/version window, but do not provide patch details or remediation steps i...

Malicious code in teamcity-build-artifacts-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 235e70f767d4caae7345fc80ce5bf59a7609ad9293fb2e2a74f70477ae9cac1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6434 Malicious code in teamcity-build-artifacts-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 235e70f767d4caae7345fc80ce5bf59a7609ad9293fb2e2a74f70477ae9cac1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in teamcity-build-artifacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cade57254eb5cf373a486779a399b9ef62a40071ee86e84f5c8517c39bd231e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6433 Malicious code in teamcity-build-artifacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cade57254eb5cf373a486779a399b9ef62a40071ee86e84f5c8517c39bd231e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...