Skip to content
OpenAdvisories
Low · 2.7 CVE-2026-28360 EUVD-2026-9209GHSA-mpp2-x7wv-38hv

NocoDB: Plaintext Storage of Shared View Passwords

Published Mar 2, 2026 · Updated Mar 3, 2026 · Assigned by GitHub_M

Description

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, shared view passwords were stored in plaintext in the database and compared using direct string equality. This issue has been patched in version 0.301.3.

Affected products

VendorProductAffectedFixed
nocodb nocodb < 0.301.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm nocodb < 0.301.3 0.301.3 GHSA-mpp2-x7wv-38hv

References