NocoDB vulnerable to Denial of Service

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-3423 · ADVISORY
• nocodb/nocodb commit 000ecd8 · WEB
• nocodb/nocodb · PACKAGE
• huntr.dev/bounties/94639d8e-8301-4432-ab80-e76e1346e631 · WEB

nocodb のその他の脆弱性

• CVE-2026-28401中 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via v-html without sani…
• CVE-2026-28399高 8.8NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbi…
• CVE-2026-28398中 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells…
• CVE-2026-28397中 5.4NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enabl…
• CVE-2026-28396中 6.5NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password reset flow did not revoke existing refresh…