Approved changes feed: RSS · Atom

cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJetbrains (b1b7db7a-bd16-5477-8e89-fb64c5636fcd)
ProductWebstorm (9d7c5813-a0d4-561a-8bd5-431fe7452098)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-64807 vulnerable 2026-07-29 01:06:19.867627 Details available
HIGH (7.8)
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration
Published: 2026-07-23T11:36:57.740Z
Updated: 2026-07-24T03:56:24.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64806 vulnerable 2026-07-29 01:06:19.867409 Details available
HIGH (8.4)
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter
Published: 2026-07-23T11:36:57.338Z
Updated: 2026-07-24T03:56:23.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64805 vulnerable 2026-07-29 01:06:19.867165 Details available
HIGH (8.4)
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling
Published: 2026-07-23T11:36:56.997Z
Updated: 2026-07-24T03:56:22.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64804 vulnerable 2026-07-29 01:06:19.866756 Details available
HIGH (8.4)
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling
Published: 2026-07-23T11:36:56.637Z
Updated: 2026-07-24T03:56:21.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52555 vulnerable 2026-06-08 06:52:16.065746 Details available
MEDIUM (6.3)
In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script
Published: 2024-11-15T15:05:03.874Z
Updated: 2024-11-15T18:56:12.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37051 vulnerable 2026-06-08 06:39:46.359598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31898 vulnerable 2026-06-08 05:31:54.335453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31897 vulnerable 2026-06-08 05:31:54.335049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.