CVE Intelligence

Jetbrains Datalore vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jetbrains Datalore: 2 record(s), with affected versions and fixes.
cpe:2.3:a:jetbrains:datalore

CVE-2026-111093 High · 7.5 CWE-23 Oct 15, 2026
Relative Path Traversal in Jetbrains Datalore
In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files
CVE-2026-32745 Medium · 5.7 CWE-319 Mar 13, 2026
Cleartext Transmission of Sensitive Information in Jetbrains Datalore
In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings