PhpStorm at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 2 | 0 |
| Oct 2026 | 2 | 1 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 2 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
Low max 4.4WID-SEC-2026-4397 2 CVEs
JetBrains PhpStorm: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JetBrains PhpStorm ausnutzen, um Informationen offenzulegen und Dateien zu manipulieren.
-
High max 8.0WID-SEC-2026-4279 1 CVE
JetBrains (IntelliJ IDEA , PyCharm, PhpStorm, WebStorm, CLion, DataGrip, DataSpell): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JetBrains (IntelliJ IDEA , PyCharm, PhpStorm, WebStorm, CLion, DataGrip, DataSpell) ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
-
High max 9.3WID-SEC-2024-1335 1 CVE
JetBrains Produkte: Schwachstelle ermöglicht Offenlegung von Informationen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IntelliJ IDEA, DataGrip, PhpStorm, PyCharm und WebStorm IDEA ausnutzen, um Informationen offenzulegen.
8 results · Feed
-
Medium 4.4
In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted…
-
Medium 4.3
In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection
-
Critical 9.0
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider…
-
High 8.0
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.…
-
High 8.4
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configu…
-
High 8.4
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project too…
-
Critical 9.3CVE-2024-37051 Public exploit
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: Intelli…
-
Low 3.3
In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file