| Package | Affected versions | Patched versions |
|---|---|---|
| youtrack | ≥ 2026.1, < 2026.1.13914≥ 2026.2, < 2026.2.18095< 2025.3.156085 | 2026.1.139142026.2.180952025.3.156085 |
In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free