Baserow vulnerabilities

CVEs whose affected-version data names the Baserow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19754High· 8.6PoC

1mo ago

Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction

Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fields can provide an undocumented fourth argument that is …

▾ MidnightBaserow · BaserowEPSS 0.29%via CVEORG