GHSA-f74w-272x-mqcv
Medium · 5.4CVSS
5.4
EPSS
—
Published
May 21, 2026
CISA due date
—
The record
NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | nocodb | 0 | No fix |
Related vulnerabilities
- CVE-2026-46550 NocoDB is software for building databases as spreadsheets. Same vulnerability
- CVE-2026-53928 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53929 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53927 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53930 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53931 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53926 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-47386 NocoDB is software for building databases as spreadsheets. Also affects nocodb