Description
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | PyCharm | < 2025.3.2 | 2025.3.2 |
High · 8.2
CVE-2026-25847
EUVD-2026-6391GHSA-rhp6-v5v3-v7p4
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible
Published Feb 9, 2026 · Updated Feb 26, 2026 · Assigned by JetBrains