EUVD-2026-125254

NocoDB from 0.300.0 before 2026.04.4 contains a denial of service vulnerability that allows authenticated users to crash the server by triggering an unhandled promise rejection in MetaService metadata logging. Attackers can send a request leaving a lookup condition undefined, causing knex binding...

CVE-2026-126267

NocoDB versions from 0.300.0 before 2026.04.4 are vulnerable to a Denial of Service (DoS) attack. The issue stems from an unhandled promise rejection within MetaService metadata logging . An authenticated user can trigger the crash by sending a request that leaves a lookup condition undefined, le...