Approved changes feed: RSS · Atom

cpe:2.3:a:xgenecloud:nocodb:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXgenecloud (f984147d-ec85-5a01-954a-1a70a05b6fb4)
ProductNocodb (9c83a427-5c27-5072-ae12-cef862943577)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/nocodb/nocodb purl2cpe 2026-06-01 10:12:23.870189
pkg:github/nocodb/nocodb purl2cpe 2026-06-01 10:12:23.870191
pkg:npm/nocodb purl2cpe 2026-06-01 10:12:23.870192

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5104 vulnerable 2026-06-08 06:19:41.491540 Improper Input Validation in nocodb/nocodb
MEDIUM (5.7)
Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0.
Published: 2023-09-21T08:44:16.801Z
Updated: 2024-09-24T16:37:13.074Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3423 vulnerable 2026-06-08 05:48:20.909071 Allocation of Resources Without Limits or Throttling in nocodb/nocodb
HIGH (7.3)
Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-03T01:07:06.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2339 vulnerable 2026-06-08 05:43:35.354986 Server-Side Request Forgery (SSRF) in nocodb/nocodb
CRITICAL (9.1)
With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.
Published: 2022-07-07T03:15:12.000Z
Updated: 2024-08-03T00:32:09.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2079 vulnerable 2026-06-08 05:42:50.219895 Cross-site Scripting (XSS) - Stored in nocodb/nocodb
HIGH (7.3)
Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+.
Published: 2022-06-14T08:40:10.000Z
Updated: 2024-08-03T00:24:44.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2064 vulnerable 2026-06-08 05:42:50.180217 Insufficient Session Expiration in nocodb/nocodb
CRITICAL (9.1)
Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+.
Published: 2022-06-13T11:45:15.000Z
Updated: 2024-08-03T00:24:44.195Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2063 vulnerable 2026-06-08 05:42:50.179721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2062 vulnerable 2026-06-08 05:42:50.179336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2022 vulnerable 2026-06-08 05:42:50.066365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22121 vulnerable 2026-06-08 05:40:06.030082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22120 vulnerable 2026-06-08 05:40:06.029611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.