EUVD-2026-118087

In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation...

CVE-2026-123323

JetBrains YouTrack versions before 2025.3.170763 , 2026.1.14150 , and 2026.2.19656 are vulnerable to a flaw in the app widget host . Due to improper URL validation , malicious applications can bypass user confirmation to send REST requests . This vulnerability carries a CVSS 3.1 score of 8.4 (Hig...