In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting Payload via artifacts.CreditsThis vulnerability was found by asotycReferenceshttps://advisories.octopus.com/post/2026/sa2026-05