Skip to contentNocodb vulnerabilities
Newest
- nocodbNocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password PageCVE-2025-27506Fix available5.4 Medium
- nocodbNocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vueCVE-2023-49781Fix available7.3 High
- nocodbNocoDB SQL Injection vulnerabilityCVE-2023-50718Fix available6.5 Medium
- nocodbNocoDB Allows Preview of File with Dangerous ContentCVE-2023-50717Fix available5.7 Medium
- nocodbSQL Injection in nocodbCVE-2023-43794Fix available6.5 Medium
- nocodb, nocodb nocodb/nocodb +1 moreImproper Input Validation in nocodb/nocodbCVE-2023-5104Fix available5.7 Medium
- nocodbNocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an...CVE-2023-35843Public exploit7.5 High
- nocodb, nocodb nocodb/nocodb +1 moreAllocation of Resources Without Limits or Throttling in nocodb/nocodbCVE-2022-3423Fix available7.3 High
- nocodb, nocodb nocodb/nocodb +1 moreServer-Side Request Forgery (SSRF) in nocodb/nocodbCVE-2022-23399.1 Critical
- nocodb, nocodb nocodb/nocodb +1 moreCross-site Scripting (XSS) - Stored in nocodb/nocodbCVE-2022-2079Fix available7.3 High
- nocodb, nocodb nocodb/nocodb +1 moreInsufficient Session Expiration in nocodb/nocodbCVE-2022-2064Fix available9.1 Critical
- nocodb, nocodb nocodb/nocodb +1 moreImproper Privilege Management in nocodb/nocodbCVE-2022-2063Fix available9.0 Critical
- nocodb, nocodb nocodb/nocodb +1 moreGeneration of Error Message Containing Sensitive Information in nocodb/nocodbCVE-2022-2062Fix available9.1 Critical
- nocodb, nocodb nocodb/nocodb +1 moreCross-site Scripting (XSS) - Stored in nocodb/nocodbCVE-2022-20229.0 Critical
- nocodbNocoDB - CSV Injection in User ManagementCVE-2022-221218.0 High
- nocodbNocoDB - Observable Discrepancy in the password-reset featureCVE-2022-221205.3 Medium