Description
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | WebStorm | < 2026.2 | 2026.2 |
Advisories 1
- WID-SEC-2026-2507 JetBrains WebStorm: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Jul 23, 2026