Browse CVEs

HIGH 8.8 CVE-2026-28399 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbitrary SQL… Nocodb 0.301.3+ Fix from $1,9502026-03-02 MEDIUM 5.4 CVE-2026-28401 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via v-html without sanitization … Nocodb 0.301.3+ Fix from $1,6002026-03-02 MEDIUM 6.5 CVE-2026-28396 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password reset flow did not revoke existing refresh tokens, … Nocodb 0.301.3+ Fix from $1,6002026-03-02 MEDIUM 6.3 CVE-2026-28361 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the MCP token service did not validate token ownership, allowing… Nocodb 0.301.3+ Fix from $1,6002026-03-02 MEDIUM 5.4 CVE-2026-28359 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Editor role can inject arbitrary HTML… Nocodb 0.301.3+ Fix from $1,6002026-03-02 MEDIUM 5.4 CVE-2026-28397 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enable stored … Nocodb 0.301.3+ Fix from $1,6002026-03-02 MEDIUM 5.4 CVE-2026-28398 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rend… Nocodb 0.301.3+ Fix from $1,6002026-03-02 MEDIUM 5.3 CVE-2026-28360 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, shared view passwords were stored in plaintext in the database a… Nocodb 0.301.3+ Fix from $1,6002026-03-02 MEDIUM 5.4 CVE-2026-28357 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, a stored XSS vulnerability exists in the Formula virtual cell. F… Nocodb 0.301.3+ Fix from $1,6002026-03-02 MEDIUM 5.3 CVE-2026-28358 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint returned different responses for re… Nocodb 0.301.3+ Fix from $1,6002026-03-02 CRITICAL 9.0 CVE-2026-24769 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a stored cross-site scripting (XSS) vulnerability exists in Noco… Nocodb 0.301.0+ Fix from $2,3002026-01-28 MEDIUM 6.4 CVE-2026-24767 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a blind Server-Side Request Forgery (SSRF) vulnerability exists … Nocodb 0.301.0+ Fix from $1,6002026-01-28 MEDIUM 6.1 CVE-2026-24768 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect (open redirect) vulnerability exists in … Nocodb 0.301.0+ Fix from $1,6002026-01-28 MEDIUM 6.1 CVE-2025-27506 NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vulnerable to Reflected Cross-S… Nocodb 0.258.0+ Fix from $1,6002025-03-06 MEDIUM 6.5 CVE-2023-50718 NocoDB is software for building databases as spreadsheets. Prior to version 0.202.10, an authenticated attacker with create access could conduct a SQ… Nocodb 0.202.10+ Fix from $1,6002024-05-14 MEDIUM 5.4 CVE-2023-50717 NocoDB is software for building databases as spreadsheets. Starting in verson 0.202.6 and prior to version 0.202.10, an attacker can upload a html fi… Nocodb 0.202.10+ Fix from $1,6002024-05-14 HIGH 7.6 CVE-2023-49781 NocoDB is software for building databases as spreadsheets. Prior to 0.202.9, a stored cross-site scripting vulnerability exists within the Formula vi… Nocodb 0.202.9+ Fix from $1,9502024-05-14 MEDIUM 6.5 CVE-2023-5104 Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0. Nocodb 0.96.0+ Fix from $1,6002023-09-21 HIGH 7.5 CVE-2023-35843EPSS 9% NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the serve… Nocodb after 0.106.1 Fix from $1,9502023-06-19 MEDIUM 6.5 CVE-2022-3423 Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0. Nocodb 0.92.0+ Fix from $1,6002022-10-07 HIGH 7.5 CVE-2022-2339 With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead t… Nocodb 0.92.0+ Fix from $1,9502022-07-07 MEDIUM 5.4 CVE-2022-2079 Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+. Nocodb 0.91.7+ Fix from $1,6002022-06-14 HIGH 8.8 CVE-2022-2063 Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+. Nocodb 0.91.7+ Fix from $1,9502022-06-13 HIGH 8.8 CVE-2022-2064 Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+. Nocodb 0.91.7+ Fix from $1,9502022-06-13 HIGH 7.5 CVE-2022-2062 Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+. Nocodb 0.91.7+ Fix from $1,9502022-06-13 MEDIUM 5.4 CVE-2022-2022 Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7. Nocodb 0.91.7+ Fix from $1,6002022-06-07 HIGH 8.0 CVE-2022-22121 In NocoDB, versions 0.81.0 through 0.83.8 are affected by CSV Injection vulnerability (Formula Injection). A low privileged attacker can create a new… Nocodb after 0.83.8 Fix from $1,9502022-01-10 MEDIUM 5.3 CVE-2022-22120 In NocoDB, versions 0.9 to 0.83.8 are vulnerable to Observable Discrepancy in the password-reset feature. When requesting a password reset for a give… Nocodb after 0.83.8 Fix from $1,6002022-01-10