cvedb.io
CVE-2026-28401
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2026-03-02T17:16:35.220 · Last modified 2026-06-17T10:28:33.337

Summary

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via v-html without sanitization enables stored XSS. This issue has been patched in version 0.301.3.

Affected products

nocodb — nocodb

Does this affect you?

Add your gear to cvedb and we'll alert you only when nocodb ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.