WebStorm and 12 others: Insufficiently Protected Credentials
CVE-2024-37051 is fixed in 12 products on 1 platform, first by DataGrip 2024.1.4, released June 10, 2024. 10 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: High.
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| CLion | 2025.1 | CLion 2025.1 | Apr 16, 2025 |
| DataGrip | 2024.1.4 | DataGrip 2024.1.4 | Jun 10, 2024 |
| DataSpell | 2024.1.2 | DataSpell 2024.1.2 | Jun 10, 2024 |
| GoLand | 2024.1.3 | GoLand 2024.1.3 | Jun 10, 2024 |
| IntelliJ IDEA (EAP) | 262.5752.32 | IntelliJ IDEA (EAP) 262.5752.32 | May 14, 2026 |
| IntelliJ IDEA Community Edition | 2024.1.3 | IntelliJ IDEA Community Edition 2024.1.3 | Jun 10, 2024 |
| IntelliJ IDEA Ultimate Edition | 2024.1.3 | IntelliJ IDEA Ultimate Edition 2024.1.3 | Jun 10, 2024 |
| PhpStorm | 2024.3.5 | PhpStorm 2024.3.5 | Mar 13, 2025 |
| PyCharm Community Edition | 2024.1.3 | PyCharm Community Edition 2024.1.3 | Jun 10, 2024 |
| PyCharm Professional Edition | 2024.1.3 | PyCharm Professional Edition 2024.1.3 | Jun 10, 2024 |
| RubyMine | 2024.1.3 | RubyMine 2024.1.3 | Jun 10, 2024 |
| WebStorm | 2024.1.4 | WebStorm 2024.1.4 | Jun 10, 2024 |
| No fix yet | |||
| CLion (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| DataSpell (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| GoLand (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| IntelliJ IDEA Ultimate Edition (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| PhpStorm (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| PyCharm (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| PyCharm Professional Edition (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| RubyMine (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| RustRover (EAP) (Windows apps) | No fix yet | no-fix | n/a |
| WebStorm (EAP) (Windows apps) | No fix yet | no-fix | n/a |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.