Skip to content
OpenAdvisories

Vendor

Nozbe

2 known vulnerabilities.

Products

Nozbe 1 WatermelonDB 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-53813

    TCC Bypass via misconfigured Node fuses in Nozbe

    The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC (Transparency, Consent, and Control) permissions.  Acquired resource access is l…

    Nozbe Nozbe
  • Medium 5.9
    CVE-2020-4035

    DoS or local data modification via malicious record IDs in WatermelonDB

    In WatermelonDB (NPM package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the databas…

    Nozbe WatermelonDB @nozbe/watermelondb npm