Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: JetBrains YouTrack 2025.3.170763, 2026.1.14150, 2026.2.19656 Clear all filters
TI-2026-85866 CVE-2026-123325 · GHSA-w3jx-8jw5-vf7p

Untrusted remote code inclusion in JetBrains YouTrack plugin sandbox

Priority LOW 33

In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00273 Published 2026-11-06 Fixed in 2025.3.170763, 2026.1.14150 +1 CWE-829
TI-2026-85864 CVE-2026-123323 · GHSA-mf3r-rhrx-xp7c

Improper URL validation in JetBrains YouTrack app widget host

Priority LOW 36

In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.0028 Published 2026-11-06 Fixed in 2025.3.170763, 2026.1.14150 +1 CWE-862