Where
-Infinity
0

Trending

Last week
Last month
Last year

JetBrains HubIn JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 20…

Risk 87
Severity
10
First published (updated )
CVE-2026-50242

JetBrains HubWeak RNG

Risk 86
Severity
9.8
First published (updated )
CVE-2026-56141

JetBrains HubIn JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 20…

Risk 82
Severity
9.9
First published (updated )
CVE-2026-56142

JetBrains HubIn JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabl…

Risk 38
Severity
6.8
EPSS
0.00%
First published (updated )
CVE-2026-32229

JetBrains HubIn JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was poss…

Risk 61
Severity
9.8
EPSS
0.00%
First published (updated )
CVE-2026-25848
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains HubIn JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mappi…

Risk 56
Severity
8.8
EPSS
0.05%
First published (updated )
CVE-2025-24456

JetBrains HubIn JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tok…

Risk 34
Severity
5.4
First published (updated )
CVE-2024-50573

JetBrains HubXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2024-38507

JetBrains HubSSRF

Risk 86
Severity
9.8
First published (updated )
CVE-2022-48477

JetBrains HubXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2022-48429
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains HubIn JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-45471

JetBrains HubIn JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted…

Risk 27
Severity
5.3
First published (updated )
CVE-2022-34894

JetBrains HubXSS

Risk 45
Severity
6.1
First published (updated )
CVE-2022-29811

JetBrains HubXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2022-25259

JetBrains HubSSRF

Risk 66
Severity
9.1
First published (updated )
CVE-2022-25260
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains HubIn JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

Risk 86
Severity
9.8
First published (updated )
CVE-2022-25262

JetBrains HubIn JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.

Risk 38
Severity
6.5
First published (updated )
CVE-2022-24328

JetBrains HubIn JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with exc…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-24327

JetBrains HubIn JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible.

Risk 43
Severity
7.5
First published (updated )
CVE-2021-43180

JetBrains HubIn JetBrains Hub before 2021.1.13415, a DoS via user information is possible.

Risk 43
Severity
7.5
First published (updated )
CVE-2021-43182
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains HubXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2021-43181

JetBrains HubIn JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.

Risk 86
Severity
9.8
First published (updated )
CVE-2021-43183

JetBrains HubIn JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.

Risk 38
Severity
6.1
First published (updated )
CVE-2021-37541

JetBrains HubIn JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment featu…

Risk 40
Severity
6.5
First published (updated )
CVE-2021-37540

JetBrains HubIn JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.

Risk 86
Severity
9.8
First published (updated )
CVE-2021-36209
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains HubIn JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All …

Risk 43
Severity
7.5
First published (updated )
CVE-2021-31901

JetBrains HubIn JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.

Risk 27
Severity
5.3
First published (updated )
CVE-2021-25760

JetBrains HubIn JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other use…

Risk 38
Severity
6.5
First published (updated )
CVE-2021-25759

JetBrains HubIn JetBrains Hub before 2020.1.12629, an open redirect was possible.

Risk 38
Severity
6.1
First published (updated )
CVE-2021-25757

JetBrains HubIn JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.

Risk 43
Severity
7.5
First published (updated )
CVE-2020-11691
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203