NO
Product
nocodb
64
CVEs
0
On KEV
9.0
Max CVSS
5
New 30D
Severity mix
Critical 1High 10Medium 46Low 7
Watch
Add nocodb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116123 New | 3.7 | Oct 26 | NocoDB signup validatePassword excessive authentication Affected: 2026.07 |
| CVE-2026-116122 New | 3.7 | Oct 26 | NocoDB Sign-in Endpoint AuthService.validateUser information disclosure Affected: 2026.07 |
| CVE-2026-116121 New | 3.7 | Oct 26 | NocoDB Registration users.service.ts race condition Affected: 2026.08 |
| CVE-2026-46554 | 2.3 | Jun 23 | NocoDB: Stale Auth Cache After API Token Deletion Affected: < 2026.04.4 |
| CVE-2026-47388 | 2.3 | Jun 23 | NocoDB: Missing Ownership Check in MCP Attachment Read Affected: < 2026.05.1 |
| CVE-2026-46553 | 2.1 | Jun 23 | NocoDB: Attachment Size Limit Bypass via Upload-by-URL Affected: < 2026.04.1 |
| CVE-2026-46549 | 2.0 | Jun 23 | NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation Affected: < 2026.04.1 |
Showing 7