Description
In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | < 2026.2.18068 | 2026.2.18068 |
High · 8.2
CVE-2026-75048
EUVD-2026-60247GHSA-whvx-752g-wvrx
In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible
Published Aug 17, 2026 · Updated Aug 17, 2026 · Assigned by JetBrains