In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates
cve-program ·
Vendor product: YouTrack
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: Rider
cve-program ·
Vendor product: Hub
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: YouTrack
cve-program ·
Vendor product: pnpm · Vendor product: pnpm
osv · CVE-2026-101905
npm: axios
osv · CVE-2026-101904
npm: axios
osv · CVE-2026-101915
npm: @grpc/grpc-js · npm: @grpc/grpc-js
osv · CVE-2026-101900
npm: axios
osv · CVE-2026-101907
npm: axios
osv · CVE-2026-101899
npm: axios
osv · CVE-2026-101916
npm: @grpc/grpc-js · npm: @grpc/grpc-js
cve-program ·
Vendor product: heym
cve-program ·
Vendor product: onefetch
cve-program ·
Vendor product: python-utcp
cve-program ·
Vendor product: Restaurant-Management-System
osv · CVE-2026-101908
npm: axios
osv · CVE-2026-101902
npm: axios · npm: axios
cve-program ·
Vendor product: pnpm
cve-program ·
Vendor product: Agentflow 4.0
cve-program ·
Vendor product: HT Contact Form – Drag & Drop Form Builder for WordPress
cve-program ·
Vendor product: Progress® Telerik® Fiddler® Everywhere
cve-program ·
Vendor product: Progress® Telerik® Fiddler® Everywhere
cve-program ·
Vendor product: DetaWix Mobile Web Portal
cve-program ·
Vendor product: DeepStream
cve-program ·
Vendor product: wsl-pro-service
cve-program ·
Vendor product: gluonts
cve-program ·
Vendor product: Full Client · Vendor product: Host
cve-program ·
Vendor product: Full Client · Vendor product: Host
cve-program ·
Vendor product: Full Client · Vendor product: Host
cve-program ·
Vendor product: Full Client · Vendor product: Host
cve-program ·
Vendor product: Full Client · Vendor product: Host
cve-program ·
Vendor product: OSV-SCALIBR
cve-program ·
Vendor product: Grafana Enterprise · Vendor product: Grafana OSS
cve-program ·
https://github.com/EnterpriseDB/barman: Barman
cve-program ·
Vendor product: G520 Series
cve-program ·
Vendor product: G520 Series
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.