In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects
CWE-829