Skip to content Burger menu icon

The JetBrains Blog

The latest updates on all JetBrains products and topics

author avatar

Ilya Pleskunin

Updates for security issue: IntelliJ-based IDEs 2023.1+ and GitHub Plugin

Updates for security issue affecting IntelliJ-based IDEs 2023.1+ and JetBrains GitHub Plugin

A new security issue was discovered that affects the JetBrains GitHub plugin on the IntelliJ platform, which could lead to disclosure of access tokens to third-party sites. The issue affects all IntelliJ-based IDEs as of 2023.1 onwards that have the JetBrains GitHub plugin enabled and configured/in-use. 

Ilya Pleskunin
Ilya Pleskunin

JetBrains Has Received Its SOC2 Audit Report

SOC 2 (Service Organization Control II) is a comprehensive audit framework developed by the American Institute of CPAs (AICPA). This framework assesses the controls a service organization has in place in terms of security, availability, processing integrity, confidentiality, and privacy. A SOC 2 Type II report evaluates the design and suitability of these controls. This means an external auditor has looked at our systems and processes and confirmed that they are designed in accordance with the SOC2 requirements.

Ilya Pleskunin
Ilya Pleskunin

Security Bulletin Changes

For the last several years, we have published the JetBrains Security Bulletin on our blog and sent emails to Bulletin subscribers quarterly. However, this approach created an unwanted delay between the release of new versions and the publication of information about vulnerabilities. We also receive a lot of questions about vulnerable product versions from our customers.

Ilya Pleskunin
Ilya Pleskunin

SpringShell Vulnerability in JetBrains Products and Services

On March 29, 2022, we became aware of the Remote Code Execution vulnerabilities CVE-2022-22963 and CVE-2022-22965 in several libraries of the Spring Framework, which is commonly used in web applications.

Ilya Pleskunin
Ilya Pleskunin