Jetbrains Phpstorm
6 CVEs affecting Jetbrains Phpstorm. Latest disclosed: 2026-07-23. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-45977 | Critical | 9.8 | 2022-02-25 | JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 202… |
CVE-2024-37051 | Critical | 9.3 | 2024-06-10 | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 202… |
CVE-2026-64809 | High | 8.4 | 2026-07-23 | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter |
CVE-2026-64808 | High | 8.4 | 2026-07-23 | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling |
CVE-2021-25764 | Medium | 5.3 | 2021-03-18 | In JetBrains PhpStorm before 2020.3, source code could be added to debug logs. |
CVE-2022-48435 | Low | 3.3 | 2023-04-04 | In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file |