# Jetbrains Youtrack


- [CVE-2026-62422](https://insights.sbomify.com/CVE-2026-62422/): Auth bypass in YouTrack (critical 10.0)
- [CVE-2022-24442](https://insights.sbomify.com/CVE-2022-24442/): Code injection in n/a (critical 9.8)
- [CVE-2021-43185](https://insights.sbomify.com/CVE-2021-43185/): Other in n/a (critical 9.8)
- [CVE-2021-25770](https://insights.sbomify.com/CVE-2021-25770/): Code injection in n/a (critical 9.8)
- [CVE-2019-12850](https://insights.sbomify.com/CVE-2019-12850/): SQL injection in n/a (critical 9.8)
- [CVE-2019-12852](https://insights.sbomify.com/CVE-2019-12852/): Server-side request forgery in n/a (critical 9.8)
- [CVE-2019-12866](https://insights.sbomify.com/CVE-2019-12866/): Missing authorization in n/a (critical 9.8)
- [CVE-2019-12867](https://insights.sbomify.com/CVE-2019-12867/): Privilege escalation in n/a (critical 9.8)
- [CVE-2026-75045](https://insights.sbomify.com/CVE-2026-75045/): Auth bypass in YouTrack (critical 9.1)
- [CVE-2021-37549](https://insights.sbomify.com/CVE-2021-37549/): Code injection in n/a (critical 9.1)
- [CVE-2026-100277](https://insights.sbomify.com/CVE-2026-100277/): Auth bypass in YouTrack (high 8.9)
- [CVE-2026-28193](https://insights.sbomify.com/CVE-2026-28193/): Missing authorization in YouTrack (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/jetbrains/youtrack/