Description
In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | < 2026.1.13162 | 2026.1.13162 |
High · 8.7
CVE-2026-49368
EUVD-2026-33416GHSA-fq9q-7rvg-h4m2
In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible
Published May 29, 2026 · Updated May 29, 2026 · Assigned by JetBrains