In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup
[ { "events": [ { "introduced": "0" }, { "fixed": "2025.11" } ] } ]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68165.json"