EUVD-2026-125233

NocoDB before 2026.06.2 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve full OAuth client records by querying the public client lookup route in oauth.controller.ts. Attackers who know or guess a client identifier can obtain the registration acces...

CVE-2026-126288

NocoDB versions before 2026.06.2 are vulnerable to an information disclosure vulnerability located in the oauth.controller.ts file. This flaw allows unauthenticated attackers to query the public client lookup route to retrieve full OAuth client records . If an attacker can guess or identify a cli...

PT-2026-146619

NocoDB before 2026.06.2 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve full OAuth client records by querying the public client lookup route in oauth.controller.ts. Attackers who know or guess a client identifier can obtain the registration acces...