jetbrains
Safeguard articles tagged "jetbrains" — guides, analysis, and best practices for software supply chain and application security.
10 articles
CVE-2023-42793: JetBrains TeamCity Authentication Bypass Vulnerability
CVE-2023-42793 affects JetBrains TeamCity and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-10-04.
CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability
CVE-2024-27198 affects JetBrains TeamCity and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-03-07.
CVE-2024-27199: JetBrains TeamCity Relative Path Traversal Vulnerability
CVE-2024-27199 affects JetBrains TeamCity and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-20.
CVE-2026-63077: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVE-2026-63077 affects JetBrains TeamCity and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-05.
JetBrains TeamCity's Path Traversal Bug Is Now Tied to Ransomware
CVE-2024-27199, a relative path traversal in TeamCity enabling limited admin actions, carries CISA's confirmed ransomware flag — a reminder that CI/CD servers are a supply-chain target.
TeamCity Authentication Bypass Exploited by Nation-State ...
A critical TeamCity authentication bypass, CVE-2023-42793, let APT29 and North Korean hackers seize build servers for supply chain attacks.
TeamCity Authentication Bypass Enabling Admin Account Cre...
CVE-2024-27198 lets unauthenticated attackers bypass TeamCity login and create admin accounts, with active exploitation and ransomware activity observed.
How Snyk's JetBrains plugin family supports IntelliJ, PyC...
A mechanical look at how Snyk ships one JetBrains plugin across IntelliJ, PyCharm, WebStorm, GoLand, and Rider using a shared platform and backend scan engine.
JetBrains Plugin Security in 2026
JetBrains IDEs have a smaller plugin ecosystem than VS Code, but the security model is similar and the risks rhyme. Here is what to watch in 2026.
JetBrains TeamCity CVE-2023-42793: When Your Build Server Becomes the Attack Vector
A critical authentication bypass in TeamCity allowed unauthenticated attackers to gain admin access to CI/CD servers. State-sponsored groups exploited it to compromise software supply chains.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.