CVE-2026-28398

Publication date

2026-03-02 16:19:23

Family

GitHub_M

State

PUBLISHED

Description

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rendered via v-html without sanitization, enabling stored XSS. This issue has been patched in version 0.301.3.