Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-75047 EUVD-2026-60246GHSA-cfpf-r4pf-9hjm

In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint

Published Aug 17, 2026 · Updated Aug 17, 2026 · Assigned by JetBrains

Description

In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint

Affected products

VendorProductAffectedFixed
JetBrains YouTrack < 2026.2.18177 2026.2.18177

References