EUVD-2026-56184

The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOKEDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can otherwise overwrite other metadata files...

CVE-2026-31231

The Cognee library (versions through v0.4.0 ) is vulnerable to a critical remote code execution (RCE) flaw in its notebook cell execution API endpoint . The vulnerability exists because the endpoint executes arbitrary Python code provided by users via the unsafe exec() function without any sandbo...