Login Request a demo
NO
Vendor
nocodb
2 products with CVEs on record
65
CVEs
0
On KEV
5
New 30D
Products
NO
nocodb
nocodb
9.0
64 CVEs0 on KEV5 new
NO
nocodb/nocodb
nocodb
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116123
New
NO
NocoDB
Nocodb
3.7
1%
Oct 26NocoDB signup validatePassword excessive authentication
CVE-2026-116122
New
NO
NocoDB
Nocodb
3.7
0%
Oct 26NocoDB Sign-in Endpoint AuthService.validateUser information disclosure
CVE-2026-116121
New
NO
NocoDB
Nocodb
3.7
0%
Oct 26NocoDB Registration users.service.ts race condition
CVE-2026-116120
New
NO
NocoDB
Nocodb
5.6
0%
Oct 26NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resources
CVE-2026-116119
New
NO
NocoDB
Nocodb
5.5
0%
Oct 26NocoDB Password-Reset Flow users.service.ts race condition
CVE-2026-46547
NO
nocodb
nocodb
6.1
0%
Jun 23NocoDB: Reflected Cross-Site Scripting via Page Leaving Redirect URL
CVE-2026-46548
NO
nocodb
nocodb
4.3
0%
Jun 23NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)
CVE-2026-46549
NO
nocodb
nocodb
2.0
0%
Jun 23NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation
CVE-2026-46550
NO
nocodb
nocodb
5.4
0%
Jun 23NocoDB: Refresh Token Cookie Set Without `Secure` and `SameSite` Flags
CVE-2026-46552
NO
nocodb
nocodb
5.8
0%
Jun 23NocoDB: Shared-base link access can invite arbitrary users as persistent base members
CVE-2026-46553
NO
nocodb
nocodb
2.1
0%
Jun 23NocoDB: Attachment Size Limit Bypass via Upload-by-URL
CVE-2026-47375
NO
nocodb
nocodb
6.0
0%
Jun 23NocoDB: Postgres SQL Injection in Formula `ARRAYSORT`
CVE-2026-47376
NO
nocodb
nocodb
5.1
0%
Jun 23NocoDB: Reflected Cross-Site Scripting via Password Reset Token
CVE-2026-47377
NO
nocodb
nocodb
5.1
0%
Jun 23NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin
CVE-2026-47378
NO
nocodb
nocodb
6.9
0%
Jun 23NocoDB: Hidden Column Exposure in Public Shared View Endpoints
CVE-2026-47380
NO
nocodb
nocodb
6.3
0%
Jun 23NocoDB: User Enumeration via Sign-In Timing
CVE-2026-46551
NO
nocodb
nocodb
6.5
0%
Jun 23NocoDB: Missing File Size Enforcement in Upload-by-URL Allows Denial of Service via Disk Exhaustion
CVE-2026-46554
NO
nocodb
nocodb
2.3
0%
Jun 23NocoDB: Stale Auth Cache After API Token Deletion
CVE-2026-47382
NO
nocodb
nocodb
5.3
0%
Jun 23NocoDB: Server-Side Request Forgery via Database Connection Host
CVE-2026-47279
NO
nocodb
nocodb
6.9
0%
Jun 23NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints
CVE-2026-47379
NO
nocodb
nocodb
6.9
0%
Jun 23NocoDB: Plaintext Password Comparison in Shared Views
CVE-2026-47381
NO
nocodb
nocodb
6.9
0%
Jun 23NocoDB: Cross-Workspace Integration Use in Connection Test
CVE-2026-47383
NO
nocodb
nocodb
7.4
0%
Jun 23NocoDB: Stored Cross-Site Scripting via Row Comments
CVE-2026-47384
NO
nocodb
nocodb
5.3
0%
Jun 23NocoDB: SQL Injection via Column Title in Bulk GroupBy
CVE-2026-47385
NO
nocodb
nocodb
5.3
0%
Jun 23NocoDB: Path Traversal via SQLite Source Filename
CVE-2026-47386
NO
nocodb
nocodb
6.3
0%
Jun 23NocoDB: OAuth Authorization Code Race Condition
CVE-2026-47387
NO
nocodb
nocodb
8.4
0%
Jun 23NocoDB: Stored Cross-Site Scripting via Form View Redirect URL
CVE-2026-47388
NO
nocodb
nocodb
2.3
0%
Jun 23NocoDB: Missing Ownership Check in MCP Attachment Read
CVE-2026-53926
NO
nocodb
nocodb
6.3
0%
Jun 23NocoDB: OAuth Tokens Persist Through Security Events
CVE-2026-53927
NO
nocodb
nocodb
5.1
0%
Jun 23NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL
CVE-2026-53928
NO
nocodb
nocodb
6.3
0%
Jun 23NocoDB: Refresh Tokens Persist Through Password Recovery
CVE-2026-53929
NO
nocodb
nocodb
5.1
0%
Jun 23NocoDB: Stored Cross-Site Scripting via Secure Attachment
CVE-2026-53930
NO
nocodb
nocodb
5.1
0%
Jun 23NocoDB: Server-Side Request Forgery via Base Migration URL
CVE-2026-53931
NO
nocodb
nocodb
6.9
0%
Jun 23NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
CVE-2026-28401
NO
nocodb
nocodb
5.4
0%
Mar 2NocoDB: Stored Cross-Site Scripting via Rich Text Cells
CVE-2026-28399
NO
nocodb
nocodb
8.8
0%
Mar 2NocoDB: SQL Injection via DATEADD Formula
CVE-2026-28398
NO
nocodb
nocodb
5.4
0%
Mar 2NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cells
CVE-2026-28397
NO
nocodb
nocodb
5.4
0%
Mar 2NocoDB: Stored Cross-Site Scripting via Comments
CVE-2026-28396
NO
nocodb
nocodb
6.5
0%
Mar 2NocoDB: Refresh Tokens Not Revoked on Password Reset
CVE-2026-28361
NO
nocodb
nocodb
6.3
0%
Mar 2NocoDB: Missing Ownership Validation in MCP Token Operations
CVE-2026-28360
NO
nocodb
nocodb
5.3
0%
Mar 2NocoDB: Plaintext Storage of Shared View Passwords
CVE-2026-28359
NO
nocodb
nocodb
5.4
0%
Mar 2NocoDB: Stored Cross-Site Scripting via Rich Text Field
CVE-2026-28358
NO
nocodb
nocodb
5.3
1%
Mar 2NocoDB: User Enumeration via Password Reset Endpoint
CVE-2026-28357
NO
nocodb
nocodb
5.4
0%
Mar 2NocoDB: Stored Cross-Site Scripting via Formula Cell
CVE-2026-24769
NO
nocodb
nocodb
9.0
0%
Jan 28NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload
CVE-2026-24768
NO
nocodb
nocodb
6.1
0%
Jan 28NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter
CVE-2026-24767
NO
nocodb
nocodb
6.4
0%
Jan 28NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality
CVE-2026-24766
NO
nocodb
nocodb
4.9
0%
Jan 28NocoDB Vulnerable to Prototype Pollution in Connection Test Endpoint, Leading to DoS
CVE-2025-27506
NO
Nocodb
Nocodb
6.1
1%
Mar 6NocoDB is software for building databases as spreadsheets
CVE-2023-50718
NO
Nocodb
Nocodb
6.5
1%
May 14NocoDB is software for building databases as spreadsheets
CVE-2023-50717
NO
Nocodb
Nocodb
5.4
1%
May 14NocoDB is software for building databases as spreadsheets
CVE-2023-49781
NO
Nocodb
Nocodb
7.6
1%
May 14NocoDB is software for building databases as spreadsheets
CVE-2023-43794
NO
Nocodb
Nocodb
4.9
1%
Oct 17Nocodb is an open source Airtable alternative
CVE-2023-5104
NO
Nocodb
Nocodb
6.5
1%
Sep 21Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0
CVE-2023-35843
NO
Nocodb
Nocodb
7.5
9%
Jun 19NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path…
CVE-2022-3423
NO
nocodb/nocodb
nocodb
6.5
2%
Oct 7Allocation of Resources Without Limits or Throttling in nocodb/nocodb
CVE-2022-2339
NO
Nocodb
Nocodb
7.5
2%
Jul 7With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents
CVE-2022-2079
NO
Nocodb
Nocodb
5.4
1%
Jun 14Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+
CVE-2022-2064
NO
Nocodb
Nocodb
8.8
1%
Jun 13Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+
CVE-2022-2063
NO
Nocodb
Nocodb
8.8
1%
Jun 13Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+