AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-61492

JetBrains YouTrack: cross-site scripting

JetBrains

CVE-2026-61492 · Published Jul 10, 2026

Low3.5
Fix: upgrade to 2026.2.17394 or later
JetBrains advisory

In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible

Affected versions

PackageAffectedFixed in
YouTrack
Product
< 2026.2.173942026.2.17394
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-79

More JetBrains advisories

All JetBrains
Low 3.5Jul 10JetBrains YouTrack: clickjackingCVE-2026-59791fixed in 2026.2.17012Critical 9.6Jul 10JetBrains IntelliJ IDEA: code execution via path traversalCVE-2026-59792fixed in 2026.1.4 +1High 8.8Jul 10In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via...CVE-2026-59793fixed in 2026.1.2High 7.3Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59794fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59795fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: insecure permissionsCVE-2026-59796fixed in 2026.1.2