PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
nocodb NocoDB's Refresh Tokens Not Revoked on Password Reset Medium Risk 6.0 8 months ago 9 hours ago
nocodb NocoDB Vulnerable to SQL Injection via DATEADD Formula Medium Risk 6.0 8 months ago 10 hours ago
nocodb NocoDB has Plaintext Storage of Shared View Passwords Low Risk 3.0 8 months ago 10 hours ago
nocodb NocoDB Missing Ownership Validation in MCP Token Operations Medium Risk 6.0 8 months ago 10 hours ago
nocodb NocoDB Allows Preview of Files with Dangerous Content Medium Risk 5.7 2 years ago 1 month ago
nocodb NocoDB SQL Injection vulnerability Medium Risk 6.5 2 years ago 1 month ago
nocodb nocodb SQL Injection vulnerability Medium Risk 6.5 3 years ago 1 month ago
nocodb NocoDB: Missing Ownership Check in MCP Attachment Read Low Risk 3.0 5 months ago 3 months ago
nocodb NocoDB: Server-Side Request Forgery via Database Connection Host Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Path Traversal via SQLite Source Filename Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Refresh Tokens Persist Through Password Recovery Medium Risk 6.0 4 months ago 3 months ago
nocodb NocoDB: Open Redirect via Hash Fragment in hashRedirect Plugin Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: SQL Injection via Column Title in Bulk GroupBy Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Plaintext Password Comparison in Shared Views Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint Medium Risk 6.0 4 months ago 3 months ago
nocodb NocoDB: User Enumeration via Sign-In Timing Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Stale Auth Cache After API Token Deletion Low Risk 3.0 5 months ago 3 months ago
nocodb NocoDB: Stored Cross-Site Scripting via Form View Redirect URL High Risk 8.0 5 months ago 3 months ago
nocodb NocoDB: OAuth Token Scope Not Enforced at ACL Layer Allows Scope Escalation Low Risk 2.0 5 months ago 3 months ago
nocodb NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags Medium Risk 5.4 5 months ago 3 months ago
nocodb NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams) Medium Risk 4.3 5 months ago 3 months ago
nocodb NocoDB: Attachment Size Limit Bypass via Upload-by-URL Low Risk 3.0 5 months ago 3 months ago
nocodb NocoDB: Missing File Size Enforcement in Upload-by-URL Allows Denial of Service via Disk Exhaustion Medium Risk 6.5 5 months ago 3 months ago
nocodb NocoDB: Reflected Cross-Site Scripting via Page Leaving Redirect URL Medium Risk 6.1 5 months ago 3 months ago
nocodb NocoDB: Shared-base link access can invite arbitrary users as persistent base members Medium Risk 5.8 5 months ago 3 months ago
nocodb NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL Medium Risk 6.0 4 months ago 3 months ago
nocodb NocoDB: Server-Side Request Forgery via Base Migration URL Medium Risk 6.0 4 months ago 3 months ago
nocodb NocoDB: Cross-Workspace Integration Use in Connection Test Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Postgres SQL Injection in Formula `ARRAYSORT` Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: OAuth Tokens Persist Through Security Events Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Stored Cross-Site Scripting via Secure Attachment Medium Risk 6.0 4 months ago 3 months ago
nocodb NocoDB: Reflected Cross-Site Scripting via Password Reset Token Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: OAuth Authorization Code Race Condition Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB: Stored Cross-Site Scripting via Row Comments High Risk 8.0 5 months ago 3 months ago
nocodb NocoDB: Hidden Column Exposure in Public Shared View Endpoints Medium Risk 6.0 5 months ago 3 months ago
nocodb NocoDB has Stored Cross-site Scripting via Formula Cell Medium Risk 6.0 8 months ago 8 months ago
nocodb NocoDB Vulnerable to Stored Cross-site Scripting via Comments Medium Risk 6.0 8 months ago 8 months ago
nocodb NocoDB Vulnerable to Stored Cross-site Scripting via Rich Text Field Medium Risk 6.0 8 months ago 8 months ago
nocodb NocoDB Vulnerable to Stored Cross-Site Scripting via Comments and Rich Text Cells Medium Risk 6.0 8 months ago 8 months ago
nocodb NocoDB Vulnerable to User Enumeration via Password Reset Endpoint Low Risk 3.0 8 months ago 8 months ago
nocodb NocoDB Vulnerable to Stored Cross-Site Scripting via Rich Text Cells Medium Risk 6.0 8 months ago 8 months ago
nocodb NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality Medium Risk 4.9 9 months ago 9 months ago
nocodb NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter Medium Risk 6.0 9 months ago 9 months ago
nocodb NocoDB has Prototype Pollution in Connection Test Endpoint, Leading to DoS Medium Risk 4.9 9 months ago 9 months ago
nocodb NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload High Risk 8.0 9 months ago 9 months ago
nocodb NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page Medium Risk 6.1 1 year ago 1 year ago
nocodb NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue High Risk 7.3 2 years ago 1 year ago
nocodb Improper Input Validation in nocodb Medium Risk 6.5 3 years ago 2 years ago
nocodb NocoDB vulnerable to Denial of Service Medium Risk 6.5 4 years ago 2 years ago
Data courtesy of OSV.dev
Page 1