Vulnerability GHSA-6mhr-74x2-98v9
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 months ago
June 17, 2026 at 02:07 PM UTC
NocoDB: Stored Cross-Site Scripting via Secure Attachment
0.0.1 - 0.301.3
0.0.1 - 0.301.3
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
4 months ago
NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
0.0.1 - 0.301.3 GHSA-hmcr-rmjq-47qr
0.0.1 - 0.301.3 GHSA-hmcr-rmjq-47qr
Medium Risk
4 months ago
NocoDB: Server-Side Request Forgery via Base Migration URL
0.0.1 - 0.301.3 GHSA-h6vv-pcq8-7xm4
0.0.1 - 0.301.3 GHSA-h6vv-pcq8-7xm4
Medium Risk
4 months ago
NocoDB: Refresh Tokens Persist Through Password Recovery
0.0.1 - 0.301.3 GHSA-r989-7g3j-wjhw
0.0.1 - 0.301.3 GHSA-r989-7g3j-wjhw
Medium Risk
4 months ago
NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL
0.0.1 - 0.301.3 GHSA-gprh-27j3-g5h4
0.0.1 - 0.301.3 GHSA-gprh-27j3-g5h4
Medium Risk
5 months ago
NocoDB: OAuth Tokens Persist Through Security Events
osv-invalid: GHSA-g72g-r7m4-9x4g
osv-invalid: GHSA-g72g-r7m4-9x4g
Impacted packages
Timeline
Published
4 months ago
June 17, 2026 at 02:07 PM UTC
Last Modified
3 months ago
July 20, 2026 at 09:30 PM UTC