CVE-2026-123288

A stored Cross-Site Scripting (XSS) vulnerability exists in JetBrains Datalore versions prior to 2026.4 . The issue is triggered via a Vega editor link within notebook charts, leading to the execution of malicious scripts in the context of the victim's session. The vulnerability is associated wit...