nocodb has 5 CVEs on record. The busiest recent month was June 2026 with 5. None have a confirmed exploitation report. The most common weakness class is CWE-918 (3).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- —
- Publish → KEV
- —
- Last 90 days
- 0 prev 5
5
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-53931MediumNocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint28CVE-2026-53930MediumNocoDB: Server-Side Request Forgery via Base Migration URL28CVE-2026-53929MediumNocoDB: Stored Cross-Site Scripting via Secure Attachment28CVE-2026-53928MediumNocoDB: Refresh Tokens Persist Through Password Recovery28CVE-2026-53927MediumNocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL28
nocodb vulnerabilities
CVEs affecting nocodb, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-53927MediumNocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL
NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL
▾ Sunlitnocodb · nocodbEPSS 0.39%via GHSA
CVE-2026-53928MediumNocoDB: Refresh Tokens Persist Through Password Recovery
NocoDB: Refresh Tokens Persist Through Password Recovery
▾ Sunlitnocodb · nocodbEPSS 0.31%via GHSA
CVE-2026-53929MediumNocoDB: Stored Cross-Site Scripting via Secure Attachment
NocoDB: Stored Cross-Site Scripting via Secure Attachment
▾ Sunlitnocodb · nocodbEPSS 0.40%via GHSA
CVE-2026-53930MediumNocoDB: Server-Side Request Forgery via Base Migration URL
NocoDB: Server-Side Request Forgery via Base Migration URL
▾ Sunlitnocodb · nocodbEPSS 0.39%via GHSA
CVE-2026-53931MediumNocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
▾ Sunlitnocodb · nocodbEPSS 0.41%via GHSA