PT-2026-5244

🟠 NocoDB, Unvalidated Redirect Vulnerability, CVE-2023-43781 Medium https://t.co/Xvg1yCBF9n...

NocoDB code-related vulnerabilities

NocoDB is an open-source alternative to Airtable. It converts any MySQL, PostgreSQL, SQL Server, SQLite, and MariaDB databases into intelligent spreadsheets. Versions of NocoDB prior to 0.301.0 have code vulnerabilities; these vulnerabilities stem from an attachment handling mechanism that contai...

CVE-2023-43794

Nocodb is an open source Airtable alternative. Affected versions of nocodb contain a SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. By supplying a specially crafted payload to the given an attacker can inject arbitrary SQL...

Unvalidated Redirect

NocoDB is vulnerable to an unvalidated redirect. The vulnerability is due to missing validation of the user-controlled continueAfterSignIn parameter in the login flow, which allows an attacker to redirect authenticated users to arbitrary external websites after login...

EUVD-2022-27270

Malicious code in bioql PyPI...

EUVD-2025-7786

Malicious code in bioql PyPI...

EUVD-2022-6040

Malicious code in bioql PyPI...

EUVD-2023-2630

Malicious code in bioql PyPI...

EUVD-2024-1523

Malicious code in bioql PyPI...

EUVD-2022-6100

Malicious code in bioql PyPI...

EUVD-2024-1743

Malicious code in bioql PyPI...

EUVD-2022-6072

Malicious code in bioql PyPI...

EUVD-2022-5948

Malicious code in bioql PyPI...

EUVD-2022-7099

Malicious code in bioql PyPI...

EUVD-2023-2614

Malicious code in bioql PyPI...

EUVD-2024-1640

Malicious code in bioql PyPI...

EUVD-2022-34327

Malicious code in bioql PyPI...

EUVD-2022-27269

Malicious code in bioql PyPI...

CVE-2023-50718

NocoDB is software for building databases as spreadsheets. Prior to version 0.202.10, an authenticated attacker with create access could conduct a SQL Injection attack on MySQL DB using unescaped tablename. This vulnerability may result in leakage of sensitive data in the database. Version 0.202....

CVE-2023-50717

NocoDB is software for building databases as spreadsheets. Starting in verson 0.202.6 and prior to version 0.202.10, an attacker can upload a html file with malicious content. If user tries to open that file in browser malicious scripts can be executed leading stored cross-site scripting attack...