CVE-2026-103489, CoreCVE

Back Back to CVE browser

LOW

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible

Published Oct 1, 2026

2.0

LOW

CVSS 3.1

Description

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible

Affected products

Vendor JetBrains Product YouTrack Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2026.2.19422

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

JetBrains

YouTrack

unaffected

Version	Status	Constraints
0	affected	<2026.2.19422

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://www.jetbrains.com/privacy-security/issues-fixed/

Link	Providers	Tags
https://www.jetbrains.com/privacy-security/issues-fixed/

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner JetBrains

Published Oct 1, 2026

Updated Oct 1, 2026

Reserved Sep 30, 2026

Link CVE-2026-103489

CISA Vulnrichment

Updated Oct 1, 2026

NVD

Status Received

Modified Oct 1, 2026

Link CVE-2026-103489

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-103489