NocoDB's Refresh Tokens Not Revoked on Password Reset

Summary The password reset flow did not revoke existing refresh tokens, allowing an attacker with a previously stolen refresh token to continue minting valid JWTs after the victim resets their password. Details passwordReset in users.service.ts updated tokenversion invalidating JWTs but did not...

CVE-2025-47379

creationtimestamp| type| source ---|---|--- 2026-03-02 17:42:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3shkcu7t2s 2026-03-05 23:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgdxujisct2e...

CVE-2026-24113

creationtimestamp| type| source ---|---|--- 2026-03-02 16:12:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3ngqnnyq2d...

CVE-2025-10350

creationtimestamp| type| source ---|---|--- 2026-03-02 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-10350/ 2026-03-02 11:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg36xw3hev2x...

CVE-2026-28350

creationtimestamp| type| source ---|---|--- 2026-03-02 08:19:59+00:00| published-proof-of-concept| https://github.com/fedora-python/lxmlhtmlclean/security/advisories/GHSA-xvp8-3mhv-424c 2026-05-27 14:40:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtqfbqgri2a...

CVE-2026-28274

creationtimestamp| type| source ---|---|--- 2026-02-27 07:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mft5avgvia2f 2026-02-27 21:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfum53753f22...

CVE-2026-3275

creationtimestamp| type| source ---|---|--- 2026-02-27 03:51:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfssmvfqaw27 2026-02-27 17:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfuaxbxbdi2m...

CVE-2026-27149

creationtimestamp| type| source ---|---|--- 2026-02-26 22:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfsbgdaiho2e...

CVE-2026-25955

creationtimestamp| type| source ---|---|--- 2026-02-25 21:12:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfplvwfqep2y 2026-03-01 04:26:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfxvk5zxyj2n 2026-03-01 04:27:05+00:00| seen|...

CVE-2026-21902

creationtimestamp| type| source ---|---|--- 2026-02-25 18:25:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpckcuall2h 2026-02-25 19:28:47+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/juniper-networks-security-advisory-av26-172 2026-02-25 22:02:29+00:00| seen|...

Malicious code in duer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6a00caf26e2e34291c939e8d0351324c884ba9d9c5b74e5cb9c8d78177a999 The package duer-js was found to contain malicious code. Source: ghsa-malware e7255816711503f7b2f4febb10e3d2d8ef36d2e3067366ece224ad3816fbf03c Any...

MAL-2026-1030 Malicious code in chai-as-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11787dc50e16838c5d9f467010f0aaef81b3e55e916c4dd5d3fc811375994e6c The package chai-as-utils was found to contain malicious code. Source: ghsa-malware eb4208b63fd6e66931d39f1a2cd30193e87a717ce9c3ab68e5fce787d0ffdc78...

CVE-2026-1916

creationtimestamp| type| source ---|---|--- 2026-02-25 09:37:05+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfoezmuju42h 2026-02-25 09:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfofcn3xjv2k 2026-02-25 10:01:30+00:00| seen|...

CVE-2026-3166

creationtimestamp| type| source ---|---|--- 2026-02-25 08:39:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfobt26m7u2l 2026-02-25 09:16:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfodtygypj2y 2026-02-25 19:20:09+00:00| seen|...

CVE-2025-69231

creationtimestamp| type| source ---|---|--- 2026-02-25 02:22:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnmqtaeet2t 2026-02-25 03:02:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnoyg7ykq2z 2026-02-25 21:40:09+00:00| seen|...

CVE-2025-68471

creationtimestamp| type| source ---|---|--- 2026-02-24 18:04:43+00:00| seen| https://gist.github.com/ultra70/7da8942f1b523c00c5c97c28022f0826 2026-02-25 03:51:15+00:00| seen| https://gist.github.com/ultra70/d158b1e7b2058bf350285512a84aa417 2026-02-25 03:55:02+00:00| seen|...

CVE-2025-67733

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkimlakdt25 2026-02-23 20:31:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkinnkzsp2c 2026-02-23 21:07:19+00:00| seen|...

CVE-2026-27585

creationtimestamp| type| source ---|---|--- 2026-02-23 04:21:54+00:00| published-proof-of-concept| https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4 2026-02-25 03:40:19+00:00| seen| https://gist.github.com/alon710/cc12d45654c7a0339d51fb9dbbc8ed7f...

CVE-2026-27206

creationtimestamp| type| source ---|---|--- 2026-02-21 07:10:39+00:00| seen| https://gist.github.com/alon710/935450463949afbac9737b4b067b77a3 2026-02-21 07:17:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe3f7noru2k 2026-02-21 07:18:08+00:00| seen|...

CVE-2025-67298

creationtimestamp| type| source ---|---|--- 2026-02-17 17:12:43+00:00| seen| https://gist.github.com/prashunbaral/70c4f6f9d9ff8b82295623073eb41f3a...