NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin

NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL

NocoDB: Stored Cross-Site Scripting via Secure Attachment

NocoDB: Server-Side Request Forgery via Base Migration URL

NocoDB Vulnerable to Prototype Pollution in Connection Test Endpoint, Leading to DoS

Nocodb is an open source Airtable alternative

NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)

NocoDB signup validatePassword excessive authentication

NocoDB Sign-in Endpoint AuthService.validateUser information disclosure

NocoDB Registration users.service.ts race condition

NocoDB: Stale Auth Cache After API Token Deletion

NocoDB: Missing Ownership Check in MCP Attachment Read

NocoDB: Attachment Size Limit Bypass via Upload-by-URL

NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation