JetBrains PhpStorm Schwachstellen (CVE)

Für JetBrains PhpStorm veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

7 Ergebnisse
4.4Mittel
CVE-2026-123858
JetBrains PhpStorm

In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects

4.3Mittel
CVE-2026-123857
JetBrains PhpStorm

In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection

9.0Kritisch
CVE-2026-118697
JetBrains Toolbox App; JetBrains IntelliJ IDEA; JetBrains PyCharm; JetBrains PhpStorm

In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5…

8.0Hoch
CVE-2026-118696
JetBrains IntelliJ IDEA; JetBrains PyCharm; JetBrains PhpStorm; JetBrains RubyMine

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.…

8.4Hoch
CVE-2026-64809
JetBrains PhpStorm

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter

8.4Hoch
CVE-2026-64808
JetBrains PhpStorm

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling

9.3Kritisch
CVE-2024-37051
JetBrains IntelliJ IDEA; JetBrains Aqua; JetBrains CLion; JetBrains DataGrip

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGr…

4.9%EPSS