# WebStorm (EAP) security updates

The latest version of WebStorm (EAP) is 263.7307.49, released October 23, 2026. Patch Radar has 0 security fixes for WebStorm (EAP), closing 0 CVEs. 10 CVEs have no fix yet.

- Web page: https://patchblox.com/security/product/windows-app/webstorm-eap
- Platform: Windows apps
- Vendor: JetBrains
- Latest version: 263.7307.49 (Oct 23, 2026)
- Supported: yes

## CVEs with no fix yet

| CVE | Priority | Title | Status |
|---|---|---|---|
| [CVE-2021-31897](https://patchblox.com/security/data/cve/CVE-2021-31897.md) | Urgent | WebStorm: In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted… | no-fix |
| [CVE-2026-118697](https://patchblox.com/security/data/cve/CVE-2026-118697.md) | Urgent | WebStorm and 11 others: In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm,… | no-fix |
| [CVE-2021-31898](https://patchblox.com/security/data/cve/CVE-2021-31898.md) | High | WebStorm: In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS. | no-fix |
| [CVE-2024-37051](https://patchblox.com/security/data/cve/CVE-2024-37051.md) | High | WebStorm and 12 others: Insufficiently Protected Credentials | no-fix |
| [CVE-2024-52555](https://patchblox.com/security/data/cve/CVE-2024-52555.md) | High | WebStorm: In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions… | no-fix |
| [CVE-2026-118696](https://patchblox.com/security/data/cve/CVE-2026-118696.md) | High | WebStorm and 12 others: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1,… | no-fix |
| [CVE-2026-64804](https://patchblox.com/security/data/cve/CVE-2026-64804.md) | High | WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust… | no-fix |
| [CVE-2026-64805](https://patchblox.com/security/data/cve/CVE-2026-64805.md) | High | WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust… | no-fix |
| [CVE-2026-64806](https://patchblox.com/security/data/cve/CVE-2026-64806.md) | High | WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust… | no-fix |
| [CVE-2026-64807](https://patchblox.com/security/data/cve/CVE-2026-64807.md) | High | WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter… | no-fix |

## Security fixes, newest first

No security fix is on record.

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo