Advisories · Technology
nocodb.
Every CVE that names nocodb among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creation
- nocodb
- Authentication bypass
- CVSS 5.3 Medium
NocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers
- nocodb
- CWE-1021
- CVSS 6.3 Medium
NocoDB signup validatePassword excessive authentication
- NocoDB
- Authentication bypass
- CWE-799
- CVSS 6.3 Medium
NocoDB Sign-in Endpoint AuthService.validateUser information disclosure
- NocoDB
- Information disclosure
- Broken access control
- CVSS 6.3 Medium
NocoDB Registration users.service.ts race condition
- NocoDB
- Race condition
- CVSS 6.3 Medium
NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resources
- NocoDB
- Denial of service
- CVSS 5.1 Medium
NocoDB Password-Reset Flow users.service.ts race condition
- NocoDB
- Race condition
- CVSS 8.0 High
NocoDB - CSV Injection in User Management
- nocodb
- Other injection
- CVSS 5.3 Medium
NocoDB - Observable Discrepancy in the password-reset feature
- nocodb
- Information disclosure