# JetBrains YouTrack. Every CVE that names JetBrains YouTrack among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-75046.md) `CVE-2026-75046` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Broken access control - [Authentication bypass in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-75045.md) `CVE-2026-75045` · CVE record: JetBrains YouTrack · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Authentication bypass - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-75044.md) `CVE-2026-75044` · CVE record: JetBrains YouTrack · CVSS 8.1 High · Not analysed yet · Published 17 Aug 2026 · Tags: Broken access control - [Missing authentication in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-62422.md) `CVE-2026-62422` · CVE record: JetBrains YouTrack · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Authentication bypass - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-61492.md) `CVE-2026-61492` · CVE record: JetBrains YouTrack · CVSS 3.5 Low · Not analysed yet · Published 10 Jul 2026 · Tags: Cross-site scripting (XSS) - [Clickjacking in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-59791.md) `CVE-2026-59791` · CVE record: JetBrains YouTrack · CVSS 3.5 Low · Not analysed yet · Published 10 Jul 2026 · Tags: CWE-1021 - [Prototype pollution in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-57926.md) `CVE-2026-57926` · CVE record: JetBrains YouTrack · CVSS 2.6 Low · Not analysed yet · Published 26 Jun 2026 · Tags: Prototype pollution - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-57925.md) `CVE-2026-57925` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [Incorrect default permissions in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-57924.md) `CVE-2026-57924` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-57923.md) `CVE-2026-57923` · CVE record: JetBrains YouTrack · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-57922.md) `CVE-2026-57922` · CVE record: JetBrains YouTrack · CVSS 3.1 Low · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-57921.md) `CVE-2026-57921` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [Insecure direct object reference in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-49386.md) `CVE-2026-49386` · CVE record: JetBrains YouTrack · CVSS 6.5 Medium · Not analysed yet · Published 29 May 2026 · Tags: Broken access control - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-49385.md) `CVE-2026-49385` · CVE record: JetBrains YouTrack · CVSS 6.5 Medium · Not analysed yet · Published 29 May 2026 · Tags: Broken access control - [Information disclosure in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-49370.md) `CVE-2026-49370` · CVE record: JetBrains YouTrack · CVSS 3.4 Low · Not analysed yet · Published 29 May 2026 · Tags: Information disclosure - [Incorrect authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-49369.md) `CVE-2026-49369` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: Broken access control - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-49368.md) `CVE-2026-49368` · CVE record: JetBrains YouTrack · CVSS 8.7 High · Not analysed yet · Published 29 May 2026 · Tags: Cross-site scripting (XSS) - [Template injection in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-33392.md) `CVE-2026-33392` · CVE record: JetBrains YouTrack · CVSS 7.2 High · Not analysed yet · Published 17 Apr 2026 · Tags: Code injection - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-28193.md) `CVE-2026-28193` · CVE record: JetBrains YouTrack · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control - [Sensitive information in log files in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2026-25846.md) `CVE-2026-25846` · CVE record: JetBrains YouTrack · CVSS 6.5 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Information disclosure - [Race condition in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-64773.md) `CVE-2025-64773` · CVE record: JetBrains YouTrack · CVSS 2.7 Low · Not analysed yet · Published 11 Nov 2025 · Tags: Race condition - [Improper certificate validation in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-64685.md) `CVE-2025-64685` · CVE record: JetBrains YouTrack · CVSS 8.1 High · Not analysed yet · Published 10 Nov 2025 · Tags: Weak cryptography or TLS - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-64684.md) `CVE-2025-64684` · CVE record: JetBrains YouTrack · CVSS 4.5 Medium · Not analysed yet · Published 10 Nov 2025 · Tags: Broken access control - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-57731.md) `CVE-2025-57731` · CVE record: JetBrains YouTrack · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2025 · Tags: Cross-site scripting (XSS) - [Clickjacking in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-54527.md) `CVE-2025-54527` · CVE record: JetBrains YouTrack · CVSS 6.1 Medium · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-1021 - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-53959.md) `CVE-2025-53959` · CVE record: JetBrains YouTrack · CVSS 7.6 High · Not analysed yet · Published 15 Jul 2025 · Tags: Broken access control - [Missing authentication in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-47850.md) `CVE-2025-47850` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 20 May 2025 · Tags: Authentication bypass - [Missing authentication in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-48391.md) `CVE-2025-48391` · CVE record: JetBrains YouTrack · CVSS 7.7 High · Not analysed yet · Published 20 May 2025 · Tags: Authentication bypass - [Authentication bypass by spoofing in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-24458.md) `CVE-2025-24458` · CVE record: JetBrains YouTrack · CVSS 7.1 High · Not analysed yet · Published 21 Jan 2025 · Tags: Authentication bypass - [Sensitive information in log files in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2025-24457.md) `CVE-2025-24457` · CVE record: JetBrains YouTrack · CVSS 5.5 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: Information disclosure - [JetBrains YouTrack: In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack…](https://agentprime.io/advisories/CVE-2024-54158.md) `CVE-2024-54158` · CVE record: JetBrains YouTrack · CVSS 3.5 Low · Not analysed yet · Published 4 Dec 2024 · Tags: CWE-173 - [Regular expression denial of service in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-54157.md) `CVE-2024-54157` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: Denial of service - [Prototype pollution in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-54156.md) `CVE-2024-54156` · CVE record: JetBrains YouTrack · CVSS 4.2 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: Prototype pollution - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-54155.md) `CVE-2024-54155` · CVE record: JetBrains YouTrack · CVSS 3.7 Low · Not analysed yet · Published 4 Dec 2024 · Tags: Broken access control - [Path traversal in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-54154.md) `CVE-2024-54154` · CVE record: JetBrains YouTrack · CVSS 8.0 High · Not analysed yet · Published 4 Dec 2024 · Tags: Path traversal - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-54153.md) `CVE-2024-54153` · CVE record: JetBrains YouTrack · CVSS 3.1 Low · Not analysed yet · Published 4 Dec 2024 · Tags: Broken access control - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50582.md) `CVE-2024-50582` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50581.md) `CVE-2024-50581` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50580.md) `CVE-2024-50580` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50579.md) `CVE-2024-50579` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50578.md) `CVE-2024-50578` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50577.md) `CVE-2024-50577` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50576.md) `CVE-2024-50576` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS) - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50575.md) `CVE-2024-50575` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS) - [Regular expression denial of service in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-50574.md) `CVE-2024-50574` · CVE record: JetBrains YouTrack · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Denial of service - [JetBrains YouTrack: In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary…](https://agentprime.io/advisories/CVE-2024-49579.md) `CVE-2024-49579` · CVE record: JetBrains YouTrack · CVSS 8.1 High · Not analysed yet · Published 17 Oct 2024 · Tags: CWE-940 - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-48902.md) `CVE-2024-48902` · CVE record: JetBrains YouTrack · CVSS 5.4 Medium · Not analysed yet · Published 10 Oct 2024 · Tags: Broken access control - [Insufficiently protected credentials in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-47162.md) `CVE-2024-47162` · CVE record: JetBrains YouTrack · CVSS 4.1 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Hard-coded credentials - [Incorrect authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-47160.md) `CVE-2024-47160` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Broken access control - [Incorrect authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-47159.md) `CVE-2024-47159` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Broken access control - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-38506.md) `CVE-2024-38506` · CVE record: JetBrains YouTrack · CVSS 6.3 Medium · Not analysed yet · Published 18 Jun 2024 · Tags: Broken access control - [Insufficiently protected credentials in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-38505.md) `CVE-2024-38505` · CVE record: JetBrains YouTrack · CVSS 5.3 Medium · Not analysed yet · Published 18 Jun 2024 · Tags: Hard-coded credentials - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-38504.md) `CVE-2024-38504` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 18 Jun 2024 · Tags: Broken access control - [Improper certificate validation in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-35299.md) `CVE-2024-35299` · CVE record: JetBrains YouTrack · CVSS 5.9 Medium · Not analysed yet · Published 16 May 2024 · Tags: Weak cryptography or TLS - [Missing authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-28230.md) `CVE-2024-28230` · CVE record: JetBrains YouTrack · CVSS 6.5 Medium · Not analysed yet · Published 7 Mar 2024 · Tags: Broken access control - [Incorrect authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-28229.md) `CVE-2024-28229` · CVE record: JetBrains YouTrack · CVSS 6.5 Medium · Not analysed yet · Published 7 Mar 2024 · Tags: Broken access control - [Authentication bypass by spoofing in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-28228.md) `CVE-2024-28228` · CVE record: JetBrains YouTrack · CVSS 5.3 Medium · Not analysed yet · Published 7 Mar 2024 · Tags: Authentication bypass - [Cross-site scripting in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2024-22370.md) `CVE-2024-22370` · CVE record: JetBrains YouTrack · CVSS 4.6 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Cross-site scripting (XSS) - [Improper authorization in JetBrains YouTrack](https://agentprime.io/advisories/CVE-2023-50871.md) `CVE-2023-50871` · CVE record: JetBrains YouTrack · CVSS 4.3 Medium · Not analysed yet · Published 15 Dec 2023 · Tags: Broken access control - [In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms](https://agentprime.io/advisories/CVE-2023-38068.md) `CVE-2023-38068` · CVE record: JetBrains YouTrack · CVSS 6.5 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: CWE-799 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .