Security Advisory

CVE-2026-47380

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-23 20:33:27
Last updated 2026-06-24 12:32:30
Assigner GitHub_M
CVSS score 6.3
State PUBLISHED

Description

NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-user branch returned without performing a password hash comparison. This vulnerability is fixed in 2026.04.1.