CVE-2026-116120

A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllUserToken of the file /auth/user/signup of the component PublicApiLimiterGuard. This manipulation causes allocation of resources. The attack is possible to be carried out...

EUVD-2026-109613

A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllUserToken of the file /auth/user/signup of the component PublicApiLimiterGuard. This manipulation causes allocation of resources. The attack is possible to be carried out...

CVE-2026-116120

A vulnerability exists in NocoDB versions up to 2026.07.0 within the PublicApiLimiterGuard component. Specifically, the function UserRefreshToken.deleteAllUserToken in the /auth/user/signup file can be manipulated to cause an allocation of resources (CWE-770, CWE-400). This remote attack is chara...