In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible
CWE-863