NO
Product
nocodb
64
CVEs
0
On KEV
9.0
Max CVSS
5
New 30D
Severity mix
Critical 1High 10Medium 46Low 7
Watch
Add nocodb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28399 | 8.8 | Mar 2 | NocoDB: SQL Injection via DATEADD Formula Affected: < 0.301.3 |
| CVE-2022-2064 | 8.8 | Jun 13 | Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+ Affected: before 0.91.7 |
| CVE-2022-2063 | 8.8 | Jun 13 | Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+ Affected: before 0.91.7 |
| CVE-2026-47387 | 8.4 | Jun 23 | NocoDB: Stored Cross-Site Scripting via Form View Redirect URL Affected: < 2026.05.1 |
| CVE-2022-22121 | 8.0 | Jan 10 | In NocoDB, versions 0.81.0 through 0.83.8 are affected by CSV Injection vulnerability (Formula Injection) Affected: 0.81.0 through 0.83.8 |
| CVE-2023-49781 | 7.6 | May 14 | NocoDB is software for building databases as spreadsheets Affected: before 0.202.9 |
| CVE-2023-35843 | 7.5 | Jun 19 | NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path… Affected: through 0.106.1 |
| CVE-2022-2339 | 7.5 | Jul 7 | With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents Affected: before 0.92.0 |
| CVE-2022-2062 | 7.5 | Jun 13 | Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+ Affected: before 0.91.7 |
| CVE-2026-47383 | 7.4 | Jun 23 | NocoDB: Stored Cross-Site Scripting via Row Comments Affected: < 2026.05.1 |
Showing 10