CVE-2026-123288 | JetBrains Datalore up to 2026.3 Vega Editor cross site scripting

November 6, 2026 Yanac

A vulnerability categorized as problematic has been discovered in JetBrains Datalore up to 2026.3. This vulnerability affects unknown code of the component Vega Editor. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-123288. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More