Skip to content
OpenAdvisories

Vendor

Baserow

5 known vulnerabilities.

Products

Baserow 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2026-19754

    Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction

    Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fields can provide an undocumented fourth argument that is treated as a SQL templ…

    Baserow Baserow
  • High 7.5
    CVE-2026-81335

    Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources

    Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/data_sources/views.py are declared with a permission class that admits an…

    Baserow Baserow
  • High 7.7
    CVE-2021-22255

    SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server …

    Baserow Baserow