Sources: NVD · GHSA · OSV · CISA KEV · JVN

Sign in Sign up

JA EN FR

Medium 4.3

In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's...

CVE-2026-123291 First seen on SecPulse Nov 6, 19:27

Affected packages

Ecosystem	Package	Affected	Fixed
JetBrains	Datalore	< 2026.4	2026.4

Original description The description as published by the source.

In JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebook

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.3; CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: Nov 6, 2026
First seen on SecPulse: Nov 6, 19:27
GHSA: GHSA-4m7j-f8qg-366m
CWE: CWE-639

NVD GitHub Advisory

Tags(click for explanation)

All

CWE-639 Datalore

Vendors

Jetbrains

Detection sources

NIST National Vulnerability DatabaseNov 6, 20:17
GitHub Security Advisories (Global)Nov 6, 21:30
CVE.org (CVE Program・cvelistV5)Nov 6, 23:43

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details