← All advisories

Medium severity6.3NVD Advisory· Published Mar 13, 2026· Updated Apr 2, 2026

CVE-2026-32745

CVE-2026-32745

Description

In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings

Affected products

2

Jetbrains/Datalore2 versions
cpe:2.3:a:jetbrains:datalore:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jetbrains:datalore:*:*:*:*:*:*:*:*range: <2026.1
- (no CPE)range: <2026.1

Patches

Vulnerability mechanics

References

1

www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.