Advisories · Technology

JetBrains Rider.

Every CVE that names JetBrains Rider among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118697 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Improper certificate validation in JetBrains Toolbox App and others
- JetBrains Toolbox App
- JetBrains IntelliJ IDEA
- Weak cryptography or TLS
Not analysed yet 30 Oct 2026
CVE-2026-118696 CVE record

CVSS 8.0 High

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3…
- JetBrains IntelliJ IDEA
- JetBrains PyCharm
- CWE-299
Not analysed yet 30 Oct 2026
CVE-2026-100265 CVE record

CVSS 4.8 Medium

Download of code without integrity check in JetBrains Rider
- JetBrains Rider
- CWE-494
Not analysed yet 30 Sept 2026
CVE-2025-43016 CVE record

CVSS 5.4 Medium

Path traversal in JetBrains Rider
- JetBrains Rider
- Path traversal
Not analysed yet 25 Apr 2025
CVE-2025-23385 CVE record

CVSS 7.8 High

JetBrains ReSharper: In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4…
- JetBrains ReSharper
- JetBrains Rider
- CWE-114
Not analysed yet 28 Jan 2025
CVE-2024-37051 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Insufficiently protected credentials in JetBrains IntelliJ IDEA and others
- JetBrains IntelliJ IDEA
- JetBrains Aqua
- Hard-coded credentials
Not analysed yet 10 Jun 2024
CVE-2024-24939 CVE record

CVSS 3.3 Low

Sensitive information in log files in JetBrains Rider
- JetBrains Rider
- Information disclosure
Not analysed yet 6 Feb 2024
CVE-2022-37396 CVE record

CVSS 4.1 Medium

Code injection in JetBrains Rider
- JetBrains Rider
- Code injection
Not analysed yet 3 Aug 2022
CVE-2022-29821 CVE record

CVSS 6.9 Medium

Code injection in JetBrains Rider
- JetBrains Rider
- Code injection
Not analysed yet 28 Apr 2022