586 matches found
CVE-2026-24768: URL Redirection to Untrusted Site
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect...
CVE-2026-24769: Improper Neutralization of Input During Web Page Generation
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a stored cross-site scripting XSS vulnerability exists in NocoDB’s attachment handling mechanism. Authenticated users can upload malicious SVG files containing embedded JavaScript, which are later rendered inline...
NocoDB input validation error vulnerability
NocoDB is an open-source alternative to Airtable. It converts any MySQL, PostgreSQL, SQL Server, SQLite, and MariaDB databases into intelligent spreadsheets. Prior to version 0.301.0, NocoDB had a vulnerability related to input validation errors. This vulnerability stemmed from the lack of...
NocoDB code-related vulnerabilities
NocoDB is an open-source alternative to Airtable. It converts any MySQL, PostgreSQL, SQL Server, SQLite, and MariaDB databases into intelligent spreadsheets. Versions of NocoDB prior to 0.301.0 have code vulnerabilities; these vulnerabilities stem from an attachment handling mechanism that contai...
PT-2026-5244
🟠 NocoDB, Unvalidated Redirect Vulnerability, CVE-2023-43781 Medium https://t.co/Xvg1yCBF9n...
CVE-2026-24766: Improperly Controlled Modification of Object Prototype Attributes
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-level-creator permissions can exploit prototype pollution in the /api/v2/meta/connection/test endpoint, causing all database write operations to fail application-wide until server...
NocoDB code-related vulnerabilities
NocoDB is an open-source alternative to Airtable. It converts any MySQL, PostgreSQL, SQL Server, SQLite, and MariaDB databases into intelligent spreadsheets. Versions of NocoDB prior to 0.301.0 have code vulnerabilities; these vulnerabilities stem from a blind server-side request forgeing...
CVE-2026-24767: Server-Side Request Forgery (SSRF)
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a blind Server-Side Request Forgery SSRF vulnerability exists in the uploadViaURL functionality due to an unprotected HEAD request. While the subsequent file retrieval logic correctly enforces SSRF protections, t...
PT-2026-5219
Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 0.301.0 Description A Server-Side Request Forgery SSRF issue exists in the uploadViaURL functionality due to an unprotected HEAD request. The initial metadata request executes without validation, allowing limited...
PT-2026-5220
Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 0.301.0 Description An unvalidated redirect, specifically an open redirect, exists in NocoDB’s login flow due to insufficient validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a...
CVE-2023-43794
Nocodb is an open source Airtable alternative. Affected versions of nocodb contain a SQL injection vulnerability, that allows an authenticated attacker with creator access to query the underlying database. By supplying a specially crafted payload to the given an attacker can inject arbitrary SQL...
Unvalidated Redirect
NocoDB is vulnerable to an unvalidated redirect. The vulnerability is due to missing validation of the user-controlled continueAfterSignIn parameter in the login flow, which allows an attacker to redirect authenticated users to arbitrary external websites after login...
EUVD-2025-7786
Malicious code in bioql PyPI...
EUVD-2023-2614
Malicious code in bioql PyPI...
EUVD-2022-27269
Malicious code in bioql PyPI...
EUVD-2023-2630
Malicious code in bioql PyPI...
EUVD-2024-1523
Malicious code in bioql PyPI...
EUVD-2022-7099
Malicious code in bioql PyPI...