Pycharm CVE-2026-25847

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. Rated high se

Arbitrary code execution in JetBrains PyCharm before 2026.1.4 and 2026.2 lets an attacker who supplies a crafted project

Code execution in JetBrains PyCharm before 2026.2.1 is possible through Jupyter MCP (Model Context Protocol) tools that

In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the

In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible. Rated hig

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ

JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes. Rated high

Stored XSS in JetBrains PyCharm's Jupyter notebook Markdown cell renderer allows a remote, unauthenticated attacker to e

Cross-site scripting in JetBrains PyCharm's Quick Documentation rendering feature (before version 2026.2.1) enables code

In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible. Rated low severit