Pycharm

pycharm

Vendor: Jetbrains • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-49384 1Jetbrains 1Pycharm Jul 22, 2026 May 29, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible
CVE-2026-25847 1Jetbrains 1Pycharm Jun 17, 2026 Feb 9, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible
CVE-2024-37051 1Jetbrains 13Aqua ClionDatagrip+10 more Jun 17, 2026 Jun 10, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4,...Show more GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4Show less
CVE-2022-29821 1Jetbrains 1Pycharm Jun 17, 2026 Apr 28, 2022 N/A· v4 7.7 HIGH· v3 4.4 MEDIUM· v2 In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible
CVE-2022-29820 1Jetbrains 1Pycharm Jun 17, 2026 Apr 28, 2022 N/A· v4 3.5 LOW· v3 3.3 LOW· v2 In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible
CVE-2021-45977 1Jetbrains 7Clion GolandIntellij Idea+4 more Jun 17, 2026 Feb 25, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CL...Show more JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.Show less
CVE-2021-30005 1Jetbrains 1Pycharm Jun 17, 2026 May 11, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS.
CVE-2020-11694 1Jetbrains 1Pycharm Jun 17, 2026 Apr 10, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3.
CVE-2019-14958 1Jetbrains 1Pycharm Jun 17, 2026 Oct 2, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes. In a very specific situation, it could lead to a remote invocation of an OOM error message because of Uncontrol...Show more JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes. In a very specific situation, it could lead to a remote invocation of an OOM error message because of Uncontrolled Memory Allocation.Show less