AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-59791

JetBrains YouTrack: clickjacking

JetBrains

CVE-2026-59791 · Published Jul 10, 2026

Low3.5
Fix: upgrade to 2026.2.17012 or later
JetBrains advisory

In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible

Affected versions

PackageAffectedFixed in
YouTrack
Product
< 2026.2.170122026.2.17012
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-1021

More JetBrains advisories

All JetBrains
Low 3.5Jul 10JetBrains YouTrack: cross-site scriptingCVE-2026-61492fixed in 2026.2.17394Critical 9.6Jul 10JetBrains IntelliJ IDEA: code execution via path traversalCVE-2026-59792fixed in 2026.1.4 +1High 8.8Jul 10In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via...CVE-2026-59793fixed in 2026.1.2High 7.3Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59794fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59795fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: insecure permissionsCVE-2026-59796fixed in 2026.1.2