Vulnerabilities

TI-2026-36543 CVE-2026-49370 · GHSA-cvxx-fgp2-3x79

In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests

LOW 32

In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00248 Published 2026-05-29 Fixed in 2026.1.13162 CWE-201

TI-2026-36542 CVE-2026-49369 · GHSA-4535-jc6h-8qx3

LOW 19

In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00205 Published 2026-05-29 Fixed in 2026.1.13162 CWE-863

TI-2026-36541 CVE-2026-49368 · GHSA-fq9q-7rvg-h4m2

LOW 37

In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00206 Published 2026-05-29 Fixed in 2026.1.13162 CWE-79