What is the JetBrains CNA?

JetBrains is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 288 CVE records since 2022.

How many CVEs has JetBrains published?

JetBrains has published 288 CVE records, including 179 in the last two years.

What is JetBrains's CVE data quality grade?

RadicalNotion.AI grades JetBrains's CVE data quality as A, with an overall completeness score of 93.8%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (75%) information.

What products does JetBrains publish CVEs for?

JetBrains most frequently publishes CVEs for TeamCity, YouTrack, IntelliJ IDEA, Hub, intellij-community.

Which vendors does JetBrains cover?

JetBrains publishes CVEs across 2 distinct vendors, most often JetBrains, ktorio, apple.

Is JetBrains actively publishing CVEs?

JetBrains is currently active, based on 179 CVEs in the last two years.

What is the average severity of JetBrains's CVEs?

The average CVSS base score across JetBrains's scored CVEs is 5.2.

How many critical CVEs has JetBrains published?

JetBrains has published 28 critical-severity CVEs and 99 high-severity CVEs.

Are any of JetBrains's CVEs in CISA's Known Exploited Vulnerabilities catalog?

Yes. 3 of JetBrains's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.

What are the most common weakness types in JetBrains's CVEs?

JetBrains's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-532 (Insertion of Sensitive Information into Log File), CWE-862 (Missing Authorization).

How does JetBrains rank among CNAs?

By total CVE volume, JetBrains ranks #70 of 370 CNAs, and it reports more complete CVE records than 41% of all CNAs.

Grade A

Active

JetBrains

Name: JetBrains CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published February 9, 2026

288

CVEs published

Total assigned

3.8

Years active

2022–2026

5.2

Avg CVSS

Across scored CVEs

179

Recent CVEs

Last 2 years

Overview

JetBrains is a CVE Numbering Authority that has published 288 CVE records since 2022. It is currently classified as active, with 179 CVEs published in the last two years. Its CVE data quality is graded A (93.8% overall completeness).

Among the 370 CNAs tracked here, JetBrains ranks #70 by CVE volume and reports more complete records than 41% of all CNAs.

Data quality report card

How complete and consistent JetBrains's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often JetBrains also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

93.8%

Overall score

Overall completeness93.8%

Vendor completeness100%

Product completeness100%

CVSS completeness100%

CWE completeness75%

100%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

109 chars

Avg description length

Per CVE record

2022-04-05

First CVE date

Earliest assignment

2026-02-09

Latest CVE date

Most recent assignment

5.2

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of JetBrains's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical28

High99

Medium191

Low17

In CISA’s Known Exploited Vulnerabilities catalog

3 of JetBrains's CVEs are confirmed exploited in the wild and carry a CISA remediation deadline.

Common weakness types

The CWE weakness categories JetBrains most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs JetBrains has published each year.

2022

2023

2024

103

2025

2026

Top vendors

The vendors JetBrains publishes the most CVEs for.

JetBrains335 CVEs
ktorio10 CVEs
apple3 CVEs

Latest CVEs

The most recent CVEs assigned by JetBrains.

CVE-2026-62422
Critical · CVSS 10.0
EPSS 0.3%2026-07-14
CVE-2026-61492
Medium · CVSS 6.1
EPSS 0.4%2026-07-10
CVE-2026-59796
High · CVSS 8.1
EPSS 0.2%2026-07-10
CVE-2026-59795
High · CVSS 8.1
EPSS 0.2%2026-07-10
CVE-2026-59794
High · CVSS 7.3
EPSS 0.2%2026-07-10
CVE-2026-59793
High · CVSS 8.8
EPSS 0.3%2026-07-10
CVE-2026-59792
Critical · CVSS 9.8
EPSS 0.4%2026-07-10
CVE-2026-59791
Low · CVSS 3.5
EPSS 0.1%2026-07-10
CVE-2026-53914CWE-502
Critical · CVSS 9.8
EPSS 0.2%2026-06-26
CVE-2026-57926CWE-1321
Critical · CVSS 9.8
EPSS 0.2%2026-06-26
CVE-2026-57925
Medium · CVSS 5.3
EPSS 0.2%2026-06-26
CVE-2026-57924
Medium · CVSS 5.3
EPSS 0.2%2026-06-26

Track new JetBrains CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor JetBrains CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the JetBrains CNA.

What is the JetBrains CNA?: JetBrains is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 288 CVE records since 2022.
How many CVEs has JetBrains published?: JetBrains has published 288 CVE records, including 179 in the last two years.
What is JetBrains's CVE data quality grade?: RadicalNotion.AI grades JetBrains's CVE data quality as A, with an overall completeness score of 93.8%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (75%) information.
What products does JetBrains publish CVEs for?: JetBrains most frequently publishes CVEs for TeamCity, YouTrack, IntelliJ IDEA, Hub, intellij-community.
Which vendors does JetBrains cover?: JetBrains publishes CVEs across 2 distinct vendors, most often JetBrains, ktorio, apple.
Is JetBrains actively publishing CVEs?: JetBrains is currently active, based on 179 CVEs in the last two years.
What is the average severity of JetBrains's CVEs?: The average CVSS base score across JetBrains's scored CVEs is 5.2.
How many critical CVEs has JetBrains published?: JetBrains has published 28 critical-severity CVEs and 99 high-severity CVEs.
Are any of JetBrains's CVEs in CISA's Known Exploited Vulnerabilities catalog?: Yes. 3 of JetBrains's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.
What are the most common weakness types in JetBrains's CVEs?: JetBrains's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-532 (Insertion of Sensitive Information into Log File), CWE-862 (Missing Authorization).
How does JetBrains rank among CNAs?: By total CVE volume, JetBrains ranks #70 of 370 CNAs, and it reports more complete CVE records than 41% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track JetBrains CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing