VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

심각높음보통낮음Exploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

jetbrainsoracleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

jetbrains products

teamcity 283youtrack 157intellij idea 77hub 37ktor 21pycharm 12toolbox 11rider 9webstorm 9goland 8kotlin 7phpstorm 6youtrack mobile 6upsource 5

402,648 vulnerabilities · 1,766 actively exploited (CISA KEV)

jetbrains ✕Clear filters

661 results

ID	Severity	Summary	Published
CVE-2026-100255	심각9.8	In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset	30/09/2026
CVE-2026-100254	높음8.8	In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings	30/09/2026
CVE-2026-100253	높음8.8	In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL	30/09/2026
CVE-2026-75060	높음8.4	In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools