GHSA-m5qg-rvjq-727p
Low · 2.0CVSS
2.0
EPSS
—
Published
May 21, 2026
CISA due date
—
The record
NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | nocodb | 0 | No fix |
Related vulnerabilities
- CVE-2026-46549 NocoDB is software for building databases as spreadsheets. Same vulnerability
- CVE-2026-53928 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53929 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53927 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53930 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53931 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53926 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-47386 NocoDB is software for building databases as spreadsheets. Also affects nocodb