GHSA-2c5x-4jgf-88mj
Medium · 4.3CVSS
4.3
EPSS
—
Published
May 21, 2026
CISA due date
—
The record
NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | nocodb | 0 | No fix |
Related vulnerabilities
- CVE-2026-46548 NocoDB is software for building databases as spreadsheets. Same vulnerability
- CVE-2026-53928 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53929 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53927 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53930 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53931 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53926 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-47386 NocoDB is software for building databases as spreadsheets. Also affects nocodb