The JetBrains Blog

The latest updates on all JetBrains products and topics

Security

The Qodana team has delivered taint analysis for PHP in the EAP. Now developers can add taint checking to their static analysis to prevent malicious inputs.

Leverage Open-Source Code with Confidence

The pace of software development is accelerating and the cost of weak code security (vulnerabilities) can be really high. That's why mitigating vulnerability risks is a must for everyday development. For a while now, JetBrains IntelliJ IDEA has featured the Dependency Checker plugin powered by Ch…

In the fourth quarter of 2021, we resolved a number of security issues in our products. Here's a summary report that contains a description of each issue and the version in which it was resolved. (more…)…

In the third quarter of 2021, we resolved a number of security issues in our products. Here's a summary report that contains a description of each issue and the version in which it was resolved. (more…)…

Recently we published a blog post about a potential security issue caused by ua-parser-js, a dependent package that is used in the popular testing framework Karma, which in turn is the default choice for Kotlin/JS and Kotlin Multiplatform applications targeting JS. In the post, we recommended tha…

On the 22nd of October at 5:06 pm CEST a message was posted on the #javascript channel of the Kotlin Slack about a potential security issue, at which time we began our investigations. On the 23rd of October, it was reported that malware was found in a very popular npm package named ua-parser-js. The…

In the second quarter of 2021, we resolved a number of security issues in our products. Here's a summary report that contains a description of each issue and the version in which it was resolved. (more…)…

Imagine a security lapse that leaks your customers' personal data online. This could harm individuals in unimaginable ways. Security mistakes can be fatal. As a developer, being aware of the security vulnerabilities in your code – and finding and fixing them – is a crucial skill. On June 16, 2021, …

In the fourth quarter of 2020, we resolved a number of security issues in our products. Here's a summary report that contains a description of each issue and the version in which it was resolved.

In the fourth quarter of 2020, we resolved a number of security issues in our products. Here's a summary report that contains a description of each issue and the version in which it was resolved. (more…)…

TeamCity is at the heart of your build process. It builds your source code into deployable artifacts and often also deploys those artifacts, which means it has potential access to sensitive information. While it offers great security by default, here are some additional steps you can take to harden…

As part of our commitment to transparency, and keeping our customers updated in regards to the events taking place, we would like to inform you that we have proactively reached out and spoken to the US Department of Justice, and have offered them our full cooperation in this matter. Once again, to r…

The JetBrains Blog

Security

Secure Your PHP Code With Taint Analysis by Qodana

Leverage Open-Source Code with Confidence

JetBrains Security Bulletin Q4 2021

JetBrains Security Bulletin Q3 2021

Ensuring control over npm dependencies in Kotlin/JS projects

Important: ua-parser-js exploit and Kotlin/JS

JetBrains Security Bulletin Q2 2021

LiveStream Summary: Fixing Security Flaws in Spring Boot Applications Using IntelliJ IDEA and Snyk

JetBrains Security Bulletin Q1 2021

JetBrains Security Bulletin Q4 2020

Hardening Your TeamCity Server

January 8th Update on SolarWinds