CVE-2021-37540: JetBrains Hub

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.

Affected products

• JetBrains Hub: before 2021.1.13262 (fixed in 2021.1.13262)

Published 2021-08-06. Last modified 2026-06-17.