Windows apps · JetBrains
WebStorm (EAP) security updates
The latest version of WebStorm (EAP) is 263.7307.49, released October 23, 2026. Patch Radar has 0 security fixes for WebStorm (EAP), closing 0 CVEs. 10 CVEs have no fix yet.
10 with no fix yet
Latest version
263.7307.49
Released Oct 23, 2026
Security fixes
0
On record in Patch Radar
CVEs
0
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
CVEs with no fix yet
| Priority | CVE | Title | Status |
|---|---|---|---|
| Urgent | CVE-2021-31897 | WebStorm: In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted… | no-fix |
| Urgent | CVE-2026-118697 | WebStorm and 11 others: In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm,… | no-fix |
| High | CVE-2021-31898 | WebStorm: In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS. | no-fix |
| High | CVE-2024-37051 | WebStorm and 12 others: Insufficiently Protected Credentials | no-fix |
| High | CVE-2024-52555 | WebStorm: In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions… | no-fix |
| High | CVE-2026-118696 | WebStorm and 12 others: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1,… | no-fix |
| High | CVE-2026-64804 | WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust… | no-fix |
| High | CVE-2026-64805 | WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust… | no-fix |
| High | CVE-2026-64806 | WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust… | no-fix |
| High | CVE-2026-64807 | WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter… | no-fix |