Skip to content
OpenAdvisories

Vendor

nocodb

87 known vulnerabilities.

Products

nocodb 79 nocodb/nocodb 8
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-126269

    NocoDB before 2026.09.0 contains a stored cross-site scripting vulnerability that allows authenticated Editor users to …

    nocodb nocodb
  • Critical 9.2
    CVE-2026-126273

    NocoDB before 2026.09.0 contains a privilege escalation vulnerability in initAdminFromEnv.ts that silently skips super-…

    nocodb nocodb
  • Critical 9.1
    CVE-2026-126280

    NocoDB before 2026.08.0 contains a race condition in refresh-token rotation that allows attackers to reuse tokens becau…

    nocodb nocodb
  • Critical 9.1
    CVE-2022-2339

    Server-Side Request Forgery (SSRF) in nocodb/nocodb

    With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.

    nocodb nocodb/nocodb
  • Critical 9.1
    CVE-2022-2064

    Insufficient Session Expiration in nocodb/nocodb

    Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.

    nocodb nocodb/nocodb nocodb npm
  • Critical 9.0
    CVE-2022-2063

    Improper Privilege Management in nocodb/nocodb

    Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+.

    nocodb nocodb/nocodb nocodb npm
  • Critical 9.1
    CVE-2022-2062

    Generation of Error Message Containing Sensitive Information in nocodb/nocodb

    Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+.

    nocodb nocodb/nocodb nocodb npm
  • Critical 9.0
    CVE-2022-2022

    Cross-site Scripting (XSS) - Stored in nocodb/nocodb

    Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7.

    nocodb nocodb/nocodb