DA
Product
Datalore
2
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add Datalore to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111093 | 7.5 | Oct 15 | In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files Affected: before 2026.2.1 |
| CVE-2026-32745 | 5.7 | Mar 13 | In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings Affected: before 2026.1 |
Showing 2