In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack
| Vendor | Product | Versions |
|---|---|---|
| jetbrains | youtrack | 0, 2026.1.13570 |
Updated affected versions to include 2026.1.13570, changed severity to MEDIUM, and noted that the exploit is not available but the vulnerability is actively exploited.
Initial creation
