Skip to content
OpenAdvisories

Package · npm

nocodb

54 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2026-46552 Public exploit

    NocoDB: Shared-base link access can invite arbitrary users as persistent base members

    NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, shared-base sessions were granted the same base-member capabilities as authenticated viewers. Using only the shared-base UUID (xc-shared-base-id), an attacker could enumerate base …

    nocodb nocodb nocodb npm