GHSA-xr7v-j379-34v9
Medium · 4.9CVSS
4.9
EPSS
—
Published
Jan 28, 2026
CISA due date
—
The record
NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | nocodb | 0 | 0.301.0 |
Related vulnerabilities
- CVE-2026-24767 NocoDB is software for building databases as spreadsheets. Same vulnerability
- CVE-2026-53928 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53929 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53927 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53930 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53931 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-53926 NocoDB is software for building databases as spreadsheets. Also affects nocodb
- CVE-2026-47386 NocoDB is software for building databases as spreadsheets. Also affects nocodb