CVE-2018-14878: JetBrains Dotpeek

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific file, because of Deserialization of Untrusted Data.

Affected products

• JetBrains Dotpeek: before 2018.2 (fixed in 2018.2)
• JetBrains Resharper Ultimate: up to and including 2018.1.4

Published 2018-08-13. Last modified 2026-06-17.