CVE-2026-28398 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rendered via v-…
Medium CVSS: 5.3

CVE-2026-28398

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rendered via v-html without sanitization, enabling stored XSS. This issue has been patched in version 0.301.3.
Vendor
Nocodb
Product
Nocodb
CWE
CWE-79
Yayın Tarihi
2026-03-02 17:16:34
Güncelleme
2026-03-03 19:01:49
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Nocodb MEDIUM Nocodb 2026

Referanslar

https://github.com/nocodb/nocodb/releases/tag/0.301.3 https://github.com/nocodb/nocodb/security/advisories/GHSA-8vm4-g489-v3w7