In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab
[ { "events": [ { "introduced": "0" }, { "fixed": "2025.11" } ] } ]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68166.json"