Skip to content
OpenAdvisories
Low · 3.5 CVE-2026-86491 EUVD-2026-72507GHSA-m4mg-c2jx-4939

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads

Published Sep 7, 2026 · Updated Sep 8, 2026 · Assigned by JetBrains