CVE-2026-103493

JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to stored cross-site scripting (XSS) attacks through the processing of Mermaid and LaTeX content. This vulnerability could allow attackers to inject malicious scripts that execute in the context of a user's session, potentially compromising sensitive data and user accounts. Organizations using affected versions of YouTrack should prioritize patching to mitigate the risk of exploitation.