JetBrains Datalore

• CVE-2026-111093 High 7.5 In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files 0.4%
• CVE-2026-32745 Medium 6.3 In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings 0.1%