{
  "product": "WebStorm (EAP)",
  "url": "https://patchblox.com/security/product/windows-app/webstorm-eap",
  "summary": "The latest version of WebStorm (EAP) is 263.7307.49, released October 23, 2026. Patch Radar has 0 security fixes for WebStorm (EAP), closing 0 CVEs. 10 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "JetBrains",
  "supported": true,
  "latestVersion": "263.7307.49",
  "latestReleased": "2026-10-23T00:00:00Z",
  "fixCount": 0,
  "cveCount": 0,
  "exploitedCveCount": 0,
  "unfixedCveCount": 10,
  "fixes": [],
  "noFixYet": [
    {
      "cveId": "CVE-2021-31897",
      "url": "https://patchblox.com/security/cve/CVE-2021-31897",
      "title": "WebStorm: In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted\u2026",
      "priority": "Urgent",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2026-118697",
      "url": "https://patchblox.com/security/cve/CVE-2026-118697",
      "title": "WebStorm and 11 others: In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm,\u2026",
      "priority": "Urgent",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2021-31898",
      "url": "https://patchblox.com/security/cve/CVE-2021-31898",
      "title": "WebStorm: In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2024-37051",
      "url": "https://patchblox.com/security/cve/CVE-2024-37051",
      "title": "WebStorm and 12 others: Insufficiently Protected Credentials",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2024-52555",
      "url": "https://patchblox.com/security/cve/CVE-2024-52555",
      "title": "WebStorm: In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions\u2026",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2026-118696",
      "url": "https://patchblox.com/security/cve/CVE-2026-118696",
      "title": "WebStorm and 12 others: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1,\u2026",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2026-64804",
      "url": "https://patchblox.com/security/cve/CVE-2026-64804",
      "title": "WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust\u2026",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2026-64805",
      "url": "https://patchblox.com/security/cve/CVE-2026-64805",
      "title": "WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust\u2026",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2026-64806",
      "url": "https://patchblox.com/security/cve/CVE-2026-64806",
      "title": "WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust\u2026",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    },
    {
      "cveId": "CVE-2026-64807",
      "url": "https://patchblox.com/security/cve/CVE-2026-64807",
      "title": "WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter\u2026",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.49"
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}