Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

nocodb

npm

NocoDB Backend

View on github.com · View on npmjs.org

Security Advisories for nocodb in npm

Moderate
3 months ago

NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint GSA_kwCzR0hTQS1obWNyLXJtanEtNDdxcs4ABY4Z

npm nocodb
Moderate
3 months ago

NocoDB: Server-Side Request Forgery via Base Migration URL GSA_kwCzR0hTQS1oNnZ2LXBjcTgtN3htNM4ABY4Y

npm nocodb
Moderate
3 months ago

NocoDB: Stored Cross-Site Scripting via Secure Attachment GSA_kwCzR0hTQS02bWhyLTc0eDItOTh2Oc4ABY4X

npm nocodb
Moderate
3 months ago

NocoDB: Refresh Tokens Persist Through Password Recovery GSA_kwCzR0hTQS1yOTg5LTdnM2otd2pod84ABY4W

npm nocodb
Moderate
3 months ago

NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL GSA_kwCzR0hTQS1ncHJoLTI3ajMtZzVoNM4ABY4V

npm nocodb
Moderate
3 months ago

NocoDB: OAuth Tokens Persist Through Security Events GSA_kwCzR0hTQS1nNzJnLXI3bTQtOXg0Z84ABYNQ

npm nocodb
Low
3 months ago

NocoDB: Missing Ownership Check in MCP Attachment Read GSA_kwCzR0hTQS14eHBqLXE3NjQtOXI2cc4ABYNE

npm nocodb
High
3 months ago

NocoDB: Stored Cross-Site Scripting via Form View Redirect URL GSA_kwCzR0hTQS1oajg1LXBoOXEtNzhqZ84ABYND

npm nocodb
Moderate
3 months ago

NocoDB: OAuth Authorization Code Race Condition GSA_kwCzR0hTQS04bTdjLWhmMjQtNWc0N84ABYNC

npm nocodb
Moderate
3 months ago

NocoDB: Path Traversal via SQLite Source Filename GSA_kwCzR0hTQS13dnFqLTl3djQtN2ZmNc4ABYNB

npm nocodb
Moderate
3 months ago

NocoDB: SQL Injection via Column Title in Bulk GroupBy GSA_kwCzR0hTQS1wOHd4LTVmMzktdzN4NM4ABYNA

npm nocodb
High
3 months ago

NocoDB: Stored Cross-Site Scripting via Row Comments GSA_kwCzR0hTQS1qZjNnLTRnd2ctNGg2Ns4ABYM_

npm nocodb
Moderate
3 months ago

NocoDB: Server-Side Request Forgery via Database Connection Host GSA_kwCzR0hTQS13NDNoLXI1bTUtcDgzMs4ABYM-

npm nocodb
Moderate
3 months ago

NocoDB: Cross-Workspace Integration Use in Connection Test GSA_kwCzR0hTQS05NmZoLW00cjgtNnY5ds4ABYM9

npm nocodb
Moderate
3 months ago

NocoDB: User Enumeration via Sign-In Timing GSA_kwCzR0hTQS1qcjU0LWp3aGotNTVncM4ABYM8

npm nocodb
Moderate
3 months ago

NocoDB: Plaintext Password Comparison in Shared Views GSA_kwCzR0hTQS1xaHhnLTYyM2MtY2Zqbc4ABYM7

npm nocodb
Moderate
3 months ago

NocoDB: Hidden Column Exposure in Public Shared View Endpoints GSA_kwCzR0hTQS00dzZyLTVjMmotcWY1Zs4ABYM6

npm nocodb
Moderate
3 months ago

NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin GSA_kwCzR0hTQS1ydnA1LTlwNTUtZjVycM4ABYM5

npm nocodb
Moderate
3 months ago

NocoDB: Reflected Cross-Site Scripting via Password Reset Token GSA_kwCzR0hTQS02eGN4LTdxbWctdmpmcc4ABYM4

npm nocodb
Moderate
3 months ago

NocoDB: Postgres SQL Injection in Formula `ARRAYSORT` GSA_kwCzR0hTQS1jeHY3LWdtbXAtMjI4cM4ABYM3

npm nocodb
Moderate
3 months ago

NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints GSA_kwCzR0hTQS05d2doLW0yMnctOXhqOM4ABYM2

npm nocodb
Low
4 months ago

NocoDB: Stale Auth Cache After API Token Deletion GSA_kwCzR0hTQS1mNzZ4LWY5dmotOTJqds4ABXOS

npm nocodb
Low
4 months ago

NocoDB: Attachment Size Limit Bypass via Upload-by-URL GSA_kwCzR0hTQS04cndyLWY2OHYtY3Z3Ns4ABXOR

npm nocodb
Moderate
4 months ago

NocoDB: Shared-base link access can invite arbitrary users as persistent base members GSA_kwCzR0hTQS1jaHF2LXZyajctcWZmcM4ABXOQ

npm nocodb
Moderate
4 months ago

NocoDB: Missing File Size Enforcement in Upload-by-URL Allows Denial of Service via Disk Exhaustion GSA_kwCzR0hTQS05OXZjLTJqeDItNjg4cM4ABXOP

npm nocodb
Moderate
4 months ago

NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags GSA_kwCzR0hTQS1mNzR3LTI3MngtbXFjds4ABXOO

npm nocodb
Low
4 months ago

NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation GSA_kwCzR0hTQS1tNXFnLXJ2anEtNzI3cM4ABXON

npm nocodb
Moderate
4 months ago

NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams) GSA_kwCzR0hTQS0yYzV4LTRqZ2YtODhtas4ABXOM

npm nocodb
Moderate
4 months ago

NocoDB: Reflected Cross-Site Scripting via Page Leaving Redirect URL GSA_kwCzR0hTQS05cWdyLTZ2cGctOWdoOc4ABXOL

npm nocodb
Moderate
7 months ago

NocoDB Vulnerable to Stored Cross-Site Scripting via Rich Text Cells GSA_kwCzR0hTQS13d3AyLXg0cmotajhybc4ABTDv

npm nocodb
Moderate
7 months ago

NocoDB Vulnerable to Stored Cross-site Scripting via Comments GSA_kwCzR0hTQS1yY3BoLXg3bWotNTRtbc4ABTDu

npm nocodb
Moderate
7 months ago

NocoDB Vulnerable to SQL Injection via DATEADD Formula GSA_kwCzR0hTQS00NXJwLTlwOTctaDg1Ms4ABTDt

npm nocodb
Moderate
7 months ago

NocoDB Vulnerable to Stored Cross-Site Scripting via Comments and Rich Text Cells GSA_kwCzR0hTQS04dm00LWc0ODktdjN3N84ABTDs

npm nocodb
Moderate
7 months ago

NocoDB Missing Ownership Validation in MCP Token Operations GSA_kwCzR0hTQS1wOXgzLXc5OGYtN2ozcc4ABS-e

npm nocodb
Moderate
7 months ago

NocoDB's Refresh Tokens Not Revoked on Password Reset GSA_kwCzR0hTQS14NHZoLWo3NWctMjY4Z84ABS-d

npm nocodb
Low
7 months ago

NocoDB has Plaintext Storage of Shared View Passwords GSA_kwCzR0hTQS1tcHAyLXg3d3YtMzhods4ABS-c

npm nocodb
Moderate
7 months ago

NocoDB Vulnerable to Stored Cross-site Scripting via Rich Text Field GSA_kwCzR0hTQS1xeHdxLXEyNjUtaGM0NM4ABS-b

npm nocodb
Low
7 months ago

NocoDB Vulnerable to User Enumeration via Password Reset Endpoint GSA_kwCzR0hTQS0zODdtLWozcDktM3BocM4ABS-a

npm nocodb
Moderate
7 months ago

NocoDB has Stored Cross-site Scripting via Formula Cell GSA_kwCzR0hTQS12eDVwLXE4NXgteG0zY84ABS-Z

npm nocodb
Moderate
8 months ago

NocoDB has Prototype Pollution in Connection Test Endpoint, Leading to DoS GSA_kwCzR0hTQS05NWZmLTQ2ZzYtNmd3Oc4ABRsq

npm nocodb
Moderate
8 months ago

NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality GSA_kwCzR0hTQS14cjd2LWozNzktMzR2Oc4ABRsp

npm nocodb
Moderate
8 months ago

NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter GSA_kwCzR0hTQS0zaG13LThtdzMtcm1was4ABRso

npm nocodb
High
8 months ago

NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload GSA_kwCzR0hTQS1xNWM2LWgyMnItcXB3cs4ABRsn

npm nocodb
Moderate
over 1 year ago

NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page GSA_kwCzR0hTQS13ZjZjLWhyaGYtODZjd84ABFLV

npm nocodb
High
over 2 years ago

NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue GSA_kwCzR0hTQS1oNnI0LXh2dzYtamM1aM4AA74t

npm nocodb
Moderate
over 2 years ago

NocoDB SQL Injection vulnerability GSA_kwCzR0hTQS04ZnhnLW1yMzQtanFyOM4AA74r

npm nocodb
Moderate
over 2 years ago

NocoDB Allows Preview of Files with Dangerous Content GSA_kwCzR0hTQS1xZzczLWczY2YtdmhoaM4AA74q

npm nocodb
Moderate
almost 3 years ago

nocodb SQL Injection vulnerability GSA_kwCzR0hTQS0zbTVxLXEzOXYteGY4Zs4AA2gV

npm nocodb
Moderate
almost 3 years ago

Improper Input Validation in nocodb GSA_kwCzR0hTQS14cnBtLWhjY2ctMjh4N84AA1_d

npm nocodb
Moderate
almost 4 years ago

NocoDB vulnerable to Denial of Service GSA_kwCzR0hTQS1ncnY2LW03NTMtM3cyZ84AAvNO

npm nocodb
Moderate
over 4 years ago

Cross-site Scripting in NocoDB GSA_kwCzR0hTQS1odjZxLTVnNGYtODg5N84AArl3

npm nocodb
High
over 4 years ago

NocoDB information disclosure vulnerability GSA_kwCzR0hTQS1teDhxLWpxd20tODVtds4AAriu

npm nocodb
High
over 4 years ago

Improper Privilege Management in NocoDB GSA_kwCzR0hTQS1mcTRoLW0zYzgtOG0yds4AArip

npm nocodb
High
over 4 years ago

Insufficient Session Expiration in NocoDB GSA_kwCzR0hTQS02MjkzLTJ2ZzItcG1wNc4AArit

npm nocodb

Filter by Severity

Moderate 41 High 7 Low 6