In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall pageReferenceshttps://www.jetbrains.com/privacy-security/issues-fixed/