<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: JetBrains Datalore</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/jetbrains-datalore.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-123282: In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session</title><link>https://vulnfeed.org/cve/CVE-2026-123282/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-123282/</guid><pubDate>Fri, 06 Nov 2026 10:27:49 +0000</pubDate><description>In JetBrains Datalore before 2026.4 missing expiration validation of account tokens allowed a new authenticated session</description></item><item><title>CVE-2026-123280: In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports</title><link>https://vulnfeed.org/cve/CVE-2026-123280/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-123280/</guid><pubDate>Fri, 06 Nov 2026 10:27:48 +0000</pubDate><description>In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports</description></item><item><title>CVE-2026-123281: In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker</title><link>https://vulnfeed.org/cve/CVE-2026-123281/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-123281/</guid><pubDate>Fri, 06 Nov 2026 10:27:48 +0000</pubDate><description>In JetBrains Datalore before 2026.4 notebook code could execute commands in the sidecar container via the mount broker</description></item><item><title>CVE-2026-123279: In JetBrains Datalore before 2026.4 code execution was possible in a notebook&apos;s computation by view-only collaborators</title><link>https://vulnfeed.org/cve/CVE-2026-123279/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-123279/</guid><pubDate>Fri, 06 Nov 2026 10:27:47 +0000</pubDate><description>In JetBrains Datalore before 2026.4 code execution was possible in a notebook&apos;s computation by view-only collaborators</description></item></channel></rss>
