GHSA-q5c6-h22r-qpwr
NoneCVSS
—
EPSS
—
Published
Jan 28, 2026
CISA due date
—
The record
NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | nocodb | 0 | 0.301.0 |
Related vulnerabilities
- CVE-2026-24769 NocoDB is software for building databases as spreadsheets. Same vulnerability
- CVE-2026-53928 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53929 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53927 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53930 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53931 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53926 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-47386 NocoDB is software for building databases as spreadsheets. Also affects nocodb