Medium
5.4
In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link
CVE-2026-123288
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| JetBrains | Datalore |
< 2026.4 |
2026.4 |
References
- web cve@jetbrains.com
- web nvd.nist.gov
- web jetbrains.com
- web github.com