CVE Vulnerability Catalog

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE.

In JetBrains IntelliJ IDEA before 2026.2.1 SSRF was possible via the OpenAPI preview proxy in untrusted projects.

In JetBrains IntelliJ IDEA before 2026.2.1, a Server-Side Request Forgery (SSRF) was possible via the DevKit debug listener endpoint.

In JetBrains YouTrack before 2026.1.13903 and 2026.2.17950, an authenticated user could read restricted articles from other projects via the draft creation endpoint.

In JetBrains YouTrack before 2026.2.18177, a Denial of Service (DoS) attack was possible via a decompression bomb in the import endpoint.

In JetBrains YouTrack before 2026.2.18112, an authenticated user could enumerate accounts via the users search endpoint.

A vulnerability in jae-jae fetcher-mcp up to 0.3.9 affects the fetch_url/fetch_urls function in the URL Validation component, allowing a Server-Side Request Forgery (SSRF) attack. The attack can be launched remotely.

In JetBrains Ktor before 3.4.1, a potential Denial of Service (DoS) attack via WebSocket decompression was possible.

In New API (LLM gateway and AI asset management system) from 0.9.1.3 to 1.0.0-rc.7, the AdminResetPasskey function in controller/passkey.go lacks the canManageTargetRole authorization check for DELETE /api/user/:id/reset_passkey, allowing a lower-privileged administrator to remove a passkey from a same-level or higher-privileged account, including a root account.

In New API prior to 1.0.0-rc.16, repeated PUT /api/user/self requests that update language or sidebar_modules can race relay billing because controller/user.go calls User.Update and updateUserCache performs a full RedisHSetObj write to user:.Quota, overwriting concurrent HINCRBY deductions and allowing an authenticated user to keep cached quota artificially high.

In Discourse prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.1, on sites with category group moderation enabled, the review queue could include an excerpt (and permalink) of the private message attached to a flag, even when the reviewing category moderator was not a participant in that message. These notify_moderators flag messages are addressed only to moderators and, for core flags, to a category's moderation groups as they existed when the flag was raised, so a category group moderator could read flag-discussion content they were not authorized to see. This affects official plugins that create such messages and core flags raised before a moderator's group was granted moderation of the category. Only the confidentiality of a limited excerpt of these flag-related private messages is affected; no content can be modified or deleted.

In Discourse prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, users who were allowed to view a group's activity, but were not permitted to see shared drafts, could still receive shared-draft entries through the group posts and group mentions endpoints. This could disclose shared-draft topic titles and post excerpt/content, resulting in an information disclosure of unpublished draft material.

Discourse before versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0 leaked hidden or otherwise unviewable first-post content as an excerpt in the publicly-served Q&A (QAPage) JSON-LD structured data, exposing it to any unauthenticated visitor and to search-engine crawlers.

Kiota before versions 1.29.1 and 1.34.0 allows an attacker who controls or tampers with the OpenAPI description to supply a file reference that resolves outside the manifest package (e.g., ../../../../etc/passwd, an absolute path, or a file:// / http(s):// URI). When the generated manifest is deployed and consumed by an AI host, this can lead to inclusion or disclosure of files outside the intended package boundary.

The Mattermost GitLab plugin (versions <=11.8, 10.20.11, 11.5.7.0) fails to verify channel permissions when processing API requests with a caller-supplied post_id, and fails to validate the web_url parameter against the configured GitLab instance. This allows an authenticated attacker to inject bot-authored messages containing arbitrary URLs into channels they do not have access to via the createIssue and attachCommentToIssue API endpoints.

Mattermost versions 11.8.x <= 11.8.2, 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to restrict channel member role assignment to channel-scoped roles, which allows a channel administrator to gain additional channel permissions via the channel member roles API.

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate that users have read access to a channel before linking a board to it, which allows an authenticated attacker to discover the membership of private channels on the same team via creating, patching, importing, or bulk-creating boards with an arbitrary channelId.

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to enforce run-state validation on write operations for finished playbook runs, which allows a run participant to modify status, checklists, retrospective content, ownership, and participants on completed runs via REST and GraphQL API requests.

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to restrict OAuth deauthorization and personal access token management endpoints to direct user sessions, which allowed an OAuth app with a delegated user token to revoke the user's authorizations or tokens for other integrations via account-management endpoints.

Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive import, which allows a board member to escalate a guest user to Board Admin via importing a crafted .boardarchive file.