Vulnerability Details CVE-2026-123288
In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 48.4%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2026-123288
-
cpe:2.3:a:jetbrains:datalore:2022.3.1
-
cpe:2.3:a:jetbrains:datalore:2023.1
-
cpe:2.3:a:jetbrains:datalore:2023.2
-
cpe:2.3:a:jetbrains:datalore:2023.3
-
cpe:2.3:a:jetbrains:datalore:2023.3.1
-
cpe:2.3:a:jetbrains:datalore:2023.4
-
cpe:2.3:a:jetbrains:datalore:2023.5
-
cpe:2.3:a:jetbrains:datalore:2023.5.1
-
cpe:2.3:a:jetbrains:datalore:2023.6
-
cpe:2.3:a:jetbrains:datalore:2024.1
-
cpe:2.3:a:jetbrains:datalore:2024.2
-
cpe:2.3:a:jetbrains:datalore:2024.2.1
-
cpe:2.3:a:jetbrains:datalore:2024.2.2
-
cpe:2.3:a:jetbrains:datalore:2024.2.3
-
cpe:2.3:a:jetbrains:datalore:2024.3
-
cpe:2.3:a:jetbrains:datalore:2024.4
-
cpe:2.3:a:jetbrains:datalore:2024.4.1
-
cpe:2.3:a:jetbrains:datalore:2024.5
-
cpe:2.3:a:jetbrains:datalore:2024.5.1
-
cpe:2.3:a:jetbrains:datalore:2025.1
-
cpe:2.3:a:jetbrains:datalore:2025.2
-
cpe:2.3:a:jetbrains:datalore:2025.3
-
cpe:2.3:a:jetbrains:datalore:2025.3.1
-
cpe:2.3:a:jetbrains:datalore:2025.4
-
cpe:2.3:a:jetbrains:datalore:2025.4.1
-
cpe:2.3:a:jetbrains:datalore:2025.5
-
cpe:2.3:a:jetbrains:datalore:2025.5.1
-
cpe:2.3:a:jetbrains:datalore:2025.6
-
cpe:2.3:a:jetbrains:datalore:2025.6.1
-
cpe:2.3:a:jetbrains:datalore:2025.6.2
-
cpe:2.3:a:jetbrains:datalore:2026.1
-
cpe:2.3:a:jetbrains:datalore:2026.1.1
-
cpe:2.3:a:jetbrains:datalore:2026.2
-
cpe:2.3:a:jetbrains:datalore:2026.2.1
-
cpe:2.3:a:jetbrains:datalore:2026.2.2
-
cpe:2.3:a:jetbrains:datalore:2026.2.3
-
cpe:2.3:a:jetbrains:datalore:2026.2.4
-
cpe:2.3:a:jetbrains:datalore:2026.3