Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 54
Reset filtersNocoDB: Server-Side Request Forgery via Base Migration URL
NocoDB: Stored Cross-Site Scripting via Secure Attachment
NocoDB: Refresh Tokens Persist Through Password Recovery
NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL
NocoDB: OAuth Tokens Persist Through Security Events
NocoDB: Missing Ownership Check in MCP Attachment Read
NocoDB: Stored Cross-Site Scripting via Form View Redirect URL
NocoDB: OAuth Authorization Code Race Condition
NocoDB: Path Traversal via SQLite Source Filename
NocoDB: SQL Injection via Column Title in Bulk GroupBy
NocoDB: Stored Cross-Site Scripting via Row Comments
NocoDB: Server-Side Request Forgery via Database Connection Host
NocoDB: Cross-Workspace Integration Use in Connection Test
NocoDB: User Enumeration via Sign-In Timing
NocoDB: Plaintext Password Comparison in Shared Views
NocoDB: Hidden Column Exposure in Public Shared View Endpoints
NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin
NocoDB: Reflected Cross-Site Scripting via Password Reset Token
NocoDB: Postgres SQL Injection in Formula `ARRAYSORT`
NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints
NocoDB: Stale Auth Cache After API Token Deletion
NocoDB: Attachment Size Limit Bypass via Upload-by-URL
NocoDB: Shared-base link access can invite arbitrary users as persistent base members
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.