In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects
CWE-829