{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-28359", "tracking": { "current_release_date": "2026-03-23T03:14:38.996243Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-28359", "initial_release_date": "2026-03-02T16:38:33.191593Z", "revision_history": [ { "date": "2026-03-02T16:38:33.191593Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (2).| CWES updated (1)." }, { "date": "2026-03-02T16:38:34.793535Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-03-02T17:26:24.159667Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-03-02T17:26:26.323279Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-03-02T20:39:47.230846Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-03-02T20:39:49.455985Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-03-03T16:01:15.415734Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (239).| Products created (3).| References created (4).| CWES updated (1)." }, { "date": "2026-03-03T16:01:37.628188Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-03-03T16:38:49.349368Z", "number": "9", "summary": "Unknown change." }, { "date": "2026-03-03T19:26:39.661182Z", "number": "10", "summary": "CVSS created.| Products connected (1).| Product Identifiers created (1)." }, { "date": "2026-03-03T19:26:42.236149Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-03-03T22:55:31.400243Z", "number": "12", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-03T22:55:36.845406Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-03-04T18:21:20.432628Z", "number": "14", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (3).| CWES updated (1)." }, { "date": "2026-03-04T18:21:27.632773Z", "number": "15", "summary": "NCSC Score updated." }, { "date": "2026-03-20T09:37:43.248636Z", "number": "16", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:37:46.653994Z", "number": "17", "summary": "NCSC Score updated." } ], "status": "interim", "version": "17" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.10.0", "product": { "name": "vers:unknown/0.10.0", "product_id": "CSAFPID-3081272" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.1", "product": { "name": "vers:unknown/0.10.1", "product_id": "CSAFPID-3081235" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.2", "product": { "name": "vers:unknown/0.10.2", "product_id": "CSAFPID-3081251" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.3", "product": { "name": "vers:unknown/0.10.3", "product_id": "CSAFPID-3081250" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.4", "product": { "name": "vers:unknown/0.10.4", "product_id": "CSAFPID-3081260" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.5", "product": { "name": "vers:unknown/0.10.5", "product_id": "CSAFPID-3081268" } }, { "category": "product_version_range", "name": "vers:unknown/0.10.6", "product": { "name": "vers:unknown/0.10.6", "product_id": "CSAFPID-3081245" } }, { "category": "product_version_range", "name": "vers:unknown/0.100.0", "product": { "name": "vers:unknown/0.100.0", "product_id": "CSAFPID-3792031" } }, { "category": "product_version_range", "name": "vers:unknown/0.100.1", "product": { "name": "vers:unknown/0.100.1", "product_id": "CSAFPID-3792032" } }, { "category": "product_version_range", "name": "vers:unknown/0.100.2", "product": { "name": "vers:unknown/0.100.2", "product_id": "CSAFPID-3792033" } }, { "category": "product_version_range", "name": "vers:unknown/0.101.0", "product": { "name": "vers:unknown/0.101.0", "product_id": "CSAFPID-3792034" } }, { "category": "product_version_range", "name": "vers:unknown/0.101.0-beta.0", "product": { "name": "vers:unknown/0.101.0-beta.0", "product_id": "CSAFPID-3792035" } }, { "category": "product_version_range", "name": "vers:unknown/0.101.2", "product": { "name": "vers:unknown/0.101.2", "product_id": "CSAFPID-3792036" } }, { "category": "product_version_range", "name": "vers:unknown/0.104.1", "product": { "name": "vers:unknown/0.104.1", "product_id": "CSAFPID-3792037" } }, { "category": "product_version_range", "name": "vers:unknown/0.104.2", "product": { "name": "vers:unknown/0.104.2", "product_id": "CSAFPID-3792038" } }, { "category": "product_version_range", "name": "vers:unknown/0.104.3", "product": { "name": "vers:unknown/0.104.3", "product_id": "CSAFPID-3792039" } }, { "category": "product_version_range", "name": "vers:unknown/0.105.0", "product": { "name": "vers:unknown/0.105.0", "product_id": "CSAFPID-3792040" } }, { "category": "product_version_range", "name": "vers:unknown/0.105.1", "product": { "name": "vers:unknown/0.105.1", "product_id": "CSAFPID-3792041" } }, { "category": "product_version_range", "name": "vers:unknown/0.105.2", "product": { "name": "vers:unknown/0.105.2", "product_id": "CSAFPID-3792042" } }, { "category": "product_version_range", "name": "vers:unknown/0.105.3", "product": { "name": "vers:unknown/0.105.3", "product_id": "CSAFPID-3792043" } }, { "category": "product_version_range", "name": "vers:unknown/0.106.0", "product": { "name": "vers:unknown/0.106.0", "product_id": "CSAFPID-3792044" } }, { "category": "product_version_range", "name": "vers:unknown/0.106.0-beta.0", "product": { "name": "vers:unknown/0.106.0-beta.0", "product_id": "CSAFPID-3792045" } }, { "category": "product_version_range", "name": "vers:unknown/0.106.0-beta.1", "product": { "name": "vers:unknown/0.106.0-beta.1", "product_id": "CSAFPID-3792046" } }, { "category": "product_version_range", "name": "vers:unknown/0.106.1", "product": { "name": "vers:unknown/0.106.1", "product_id": "CSAFPID-1165368" } }, { "category": "product_version_range", "name": "vers:unknown/0.107.0", "product": { "name": "vers:unknown/0.107.0", "product_id": "CSAFPID-3792047" } }, { "category": "product_version_range", "name": "vers:unknown/0.107.0-beta.0", "product": { "name": "vers:unknown/0.107.0-beta.0", "product_id": "CSAFPID-3792048" } }, { "category": "product_version_range", "name": "vers:unknown/0.107.0-beta.1", "product": { "name": "vers:unknown/0.107.0-beta.1", "product_id": "CSAFPID-3792049" } }, { "category": "product_version_range", "name": "vers:unknown/0.107.1", "product": { "name": "vers:unknown/0.107.1", "product_id": "CSAFPID-3792050" } }, { "category": "product_version_range", "name": "vers:unknown/0.107.2", "product": { "name": "vers:unknown/0.107.2", "product_id": "CSAFPID-3792051" } }, { "category": "product_version_range", "name": "vers:unknown/0.107.3", "product": { "name": "vers:unknown/0.107.3", "product_id": "CSAFPID-3792052" } }, { "category": "product_version_range", "name": "vers:unknown/0.107.4", "product": { "name": "vers:unknown/0.107.4", "product_id": "CSAFPID-3792053" } }, { "category": "product_version_range", "name": "vers:unknown/0.107.5", "product": { "name": "vers:unknown/0.107.5", "product_id": "CSAFPID-3792054" } }, { "category": "product_version_range", "name": "vers:unknown/0.108.0", "product": { "name": "vers:unknown/0.108.0", "product_id": "CSAFPID-3792055" } }, { "category": "product_version_range", "name": "vers:unknown/0.108.0-beta.0", "product": { "name": "vers:unknown/0.108.0-beta.0", "product_id": "CSAFPID-3792056" } }, { "category": "product_version_range", "name": "vers:unknown/0.108.1", "product": { "name": "vers:unknown/0.108.1", "product_id": "CSAFPID-3792057" } }, { "category": "product_version_range", "name": "vers:unknown/0.109.0", "product": { "name": "vers:unknown/0.109.0", "product_id": "CSAFPID-3792058" } }, { "category": "product_version_range", "name": "vers:unknown/0.109.1", "product": { "name": "vers:unknown/0.109.1", "product_id": "CSAFPID-3792059" } }, { "category": "product_version_range", "name": "vers:unknown/0.109.2", "product": { "name": "vers:unknown/0.109.2", "product_id": "CSAFPID-3087270", "product_identification_helper": { "cpe": "cpe:2.3:a:nocodb:nocodb:0.109.2:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/0.109.3", "product": { "name": "vers:unknown/0.109.3", "product_id": "CSAFPID-3087277" } }, { "category": "product_version_range", "name": "vers:unknown/0.109.4", "product": { "name": "vers:unknown/0.109.4", "product_id": "CSAFPID-3087263" } }, { "category": "product_version_range", "name": "vers:unknown/0.109.5", "product": { "name": "vers:unknown/0.109.5", "product_id": "CSAFPID-3087288" } }, { "category": "product_version_range", "name": "vers:unknown/0.109.6", "product": { "name": "vers:unknown/0.109.6", "product_id": "CSAFPID-3087284" } }, { "category": "product_version_range", "name": "vers:unknown/0.109.7", "product": { "name": "vers:unknown/0.109.7", "product_id": "CSAFPID-3087266" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0", "product": { "name": "vers:unknown/0.11.0", "product_id": "CSAFPID-3081244" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.1", "product": { "name": "vers:unknown/0.11.1", "product_id": "CSAFPID-3081289" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.10", "product": { "name": "vers:unknown/0.11.10", "product_id": "CSAFPID-3081229" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.11", "product": { "name": "vers:unknown/0.11.11", "product_id": "CSAFPID-3081288" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.12", "product": { "name": "vers:unknown/0.11.12", "product_id": "CSAFPID-3081223" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.14", "product": { "name": "vers:unknown/0.11.14", "product_id": "CSAFPID-3081248" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.15", "product": { "name": "vers:unknown/0.11.15", "product_id": "CSAFPID-3081240" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.16", "product": { "name": "vers:unknown/0.11.16", "product_id": "CSAFPID-3081269" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.17", "product": { "name": "vers:unknown/0.11.17", "product_id": "CSAFPID-3081304" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.18", "product": { "name": "vers:unknown/0.11.18", "product_id": "CSAFPID-3081310" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.19", "product": { "name": "vers:unknown/0.11.19", "product_id": "CSAFPID-3081298" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.20", "product": { "name": "vers:unknown/0.11.20", "product_id": "CSAFPID-3081276" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.21", "product": { "name": "vers:unknown/0.11.21", "product_id": "CSAFPID-3081236" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.22", "product": { "name": "vers:unknown/0.11.22", "product_id": "CSAFPID-3081293" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.23", "product": { "name": "vers:unknown/0.11.23", "product_id": "CSAFPID-3081303" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.24", "product": { "name": "vers:unknown/0.11.24", "product_id": "CSAFPID-3081219" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.25", "product": { "name": "vers:unknown/0.11.25", "product_id": "CSAFPID-3081279" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.26", "product": { "name": "vers:unknown/0.11.26", "product_id": "CSAFPID-3081241" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.28", "product": { "name": "vers:unknown/0.11.28", "product_id": "CSAFPID-3081259" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.29", "product": { "name": "vers:unknown/0.11.29", "product_id": "CSAFPID-3081218" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.3", "product": { "name": "vers:unknown/0.11.3", "product_id": "CSAFPID-3081225" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.30", "product": { "name": "vers:unknown/0.11.30", "product_id": "CSAFPID-3081312" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.31", "product": { "name": "vers:unknown/0.11.31", "product_id": "CSAFPID-3081299" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.32", "product": { "name": "vers:unknown/0.11.32", "product_id": "CSAFPID-3081285" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.33", "product": { "name": "vers:unknown/0.11.33", "product_id": "CSAFPID-3081224" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.34", "product": { "name": "vers:unknown/0.11.34", "product_id": "CSAFPID-3081262" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.36", "product": { "name": "vers:unknown/0.11.36", "product_id": "CSAFPID-3081238" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.39", "product": { "name": "vers:unknown/0.11.39", "product_id": "CSAFPID-3081311" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.4", "product": { "name": "vers:unknown/0.11.4", "product_id": "CSAFPID-3081284" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.40", "product": { "name": "vers:unknown/0.11.40", "product_id": "CSAFPID-3081221" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.41", "product": { "name": "vers:unknown/0.11.41", "product_id": "CSAFPID-3081261" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.42", "product": { "name": "vers:unknown/0.11.42", "product_id": "CSAFPID-3081237" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.43", "product": { "name": "vers:unknown/0.11.43", "product_id": "CSAFPID-3081291" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.44", "product": { "name": "vers:unknown/0.11.44", "product_id": "CSAFPID-3081301" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.45", "product": { "name": "vers:unknown/0.11.45", "product_id": "CSAFPID-3081313" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.46", "product": { "name": "vers:unknown/0.11.46", "product_id": "CSAFPID-3081280" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.5", "product": { "name": "vers:unknown/0.11.5", "product_id": "CSAFPID-3081239" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.6", "product": { "name": "vers:unknown/0.11.6", "product_id": "CSAFPID-3081249" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.7", "product": { "name": "vers:unknown/0.11.7", "product_id": "CSAFPID-3081258" } }, { "category": "product_version_range", "name": "vers:unknown/0.11.9", "product": { "name": "vers:unknown/0.11.9", "product_id": "CSAFPID-3081287" } }, { "category": "product_version_range", "name": "vers:unknown/0.111.0", "product": { "name": "vers:unknown/0.111.0", "product_id": "CSAFPID-3087282" } }, { "category": "product_version_range", "name": "vers:unknown/0.111.1", "product": { "name": "vers:unknown/0.111.1", "product_id": "CSAFPID-3087286" } }, { "category": "product_version_range", "name": "vers:unknown/0.111.2", "product": { "name": "vers:unknown/0.111.2", "product_id": "CSAFPID-3087287" } }, { "category": "product_version_range", "name": "vers:unknown/0.111.3", "product": { "name": "vers:unknown/0.111.3", "product_id": "CSAFPID-3087274" } }, { "category": "product_version_range", "name": "vers:unknown/0.111.4", "product": { "name": "vers:unknown/0.111.4", "product_id": "CSAFPID-3087269" } }, { "category": "product_version_range", "name": "vers:unknown/0.200.0", "product": { "name": "vers:unknown/0.200.0", "product_id": "CSAFPID-3087276" } }, { "category": "product_version_range", "name": "vers:unknown/0.202.0", "product": { "name": "vers:unknown/0.202.0", "product_id": "CSAFPID-3087265" } }, { "category": "product_version_range", "name": "vers:unknown/0.202.10", "product": { "name": "vers:unknown/0.202.10", "product_id": "CSAFPID-3792060" } }, { "category": "product_version_range", "name": "vers:unknown/0.202.4", "product": { "name": "vers:unknown/0.202.4", "product_id": "CSAFPID-3087272" } }, { "category": "product_version_range", "name": "vers:unknown/0.202.5", "product": { "name": "vers:unknown/0.202.5", "product_id": "CSAFPID-3087268" } }, { "category": "product_version_range", "name": "vers:unknown/0.202.6", "product": { "name": "vers:unknown/0.202.6", "product_id": "CSAFPID-3087275" } }, { "category": "product_version_range", "name": "vers:unknown/0.202.7", "product": { "name": "vers:unknown/0.202.7", "product_id": "CSAFPID-3087289" } }, { "category": "product_version_range", "name": "vers:unknown/0.202.8", "product": { "name": "vers:unknown/0.202.8", "product_id": "CSAFPID-3087283" } }, { "category": "product_version_range", "name": "vers:unknown/0.202.9", "product": { "name": "vers:unknown/0.202.9", "product_id": "CSAFPID-3792061" } }, { "category": "product_version_range", "name": "vers:unknown/0.203.0", "product": { "name": "vers:unknown/0.203.0", "product_id": "CSAFPID-3792062" } }, { "category": "product_version_range", "name": "vers:unknown/0.203.1", "product": { "name": "vers:unknown/0.203.1", "product_id": "CSAFPID-3792063" } }, { "category": "product_version_range", "name": "vers:unknown/0.203.2", "product": { "name": "vers:unknown/0.203.2", "product_id": "CSAFPID-3792064" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.0", "product": { "name": "vers:unknown/0.204.0", "product_id": "CSAFPID-3792065" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.1", "product": { "name": "vers:unknown/0.204.1", "product_id": "CSAFPID-3792066" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.2", "product": { "name": "vers:unknown/0.204.2", "product_id": "CSAFPID-3792067" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.3", "product": { "name": "vers:unknown/0.204.3", "product_id": "CSAFPID-3792068" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.4", "product": { "name": "vers:unknown/0.204.4", "product_id": "CSAFPID-3792069" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.5", "product": { "name": "vers:unknown/0.204.5", "product_id": "CSAFPID-3792070" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.6", "product": { "name": "vers:unknown/0.204.6", "product_id": "CSAFPID-3792071" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.7", "product": { "name": "vers:unknown/0.204.7", "product_id": "CSAFPID-3792072" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.8", "product": { "name": "vers:unknown/0.204.8", "product_id": "CSAFPID-3792073" } }, { "category": "product_version_range", "name": "vers:unknown/0.204.9", "product": { "name": "vers:unknown/0.204.9", "product_id": "CSAFPID-3792074" } }, { "category": "product_version_range", "name": "vers:unknown/0.205.0", "product": { "name": "vers:unknown/0.205.0", "product_id": "CSAFPID-3792075" } }, { "category": "product_version_range", "name": "vers:unknown/0.205.1", "product": { "name": "vers:unknown/0.205.1", "product_id": "CSAFPID-3792076" } }, { "category": "product_version_range", "name": "vers:unknown/0.207.0", "product": { "name": "vers:unknown/0.207.0", "product_id": "CSAFPID-3792077" } }, { "category": "product_version_range", "name": "vers:unknown/0.207.1", "product": { "name": "vers:unknown/0.207.1", "product_id": "CSAFPID-3792078" } }, { "category": "product_version_range", "name": "vers:unknown/0.207.2", "product": { "name": "vers:unknown/0.207.2", "product_id": "CSAFPID-3792079" } }, { "category": "product_version_range", "name": "vers:unknown/0.207.3", "product": { "name": "vers:unknown/0.207.3", "product_id": "CSAFPID-3792080" } }, { "category": "product_version_range", "name": "vers:unknown/0.250.0", "product": { "name": "vers:unknown/0.250.0", "product_id": "CSAFPID-3792081" } }, { "category": "product_version_range", "name": "vers:unknown/0.250.1", "product": { "name": "vers:unknown/0.250.1", "product_id": "CSAFPID-3792082" } }, { "category": "product_version_range", "name": "vers:unknown/0.250.2", "product": { "name": "vers:unknown/0.250.2", "product_id": "CSAFPID-3792083" } }, { "category": "product_version_range", "name": "vers:unknown/0.251.0", "product": { "name": "vers:unknown/0.251.0", "product_id": "CSAFPID-3792084" } }, { "category": "product_version_range", "name": "vers:unknown/0.251.1", "product": { "name": "vers:unknown/0.251.1", "product_id": "CSAFPID-3792085" } }, { "category": "product_version_range", "name": "vers:unknown/0.251.2", "product": { "name": "vers:unknown/0.251.2", "product_id": "CSAFPID-3792086" } }, { "category": "product_version_range", "name": "vers:unknown/0.251.3", "product": { "name": "vers:unknown/0.251.3", "product_id": "CSAFPID-3792087" } }, { "category": "product_version_range", "name": "vers:unknown/0.252.0", "product": { "name": "vers:unknown/0.252.0", "product_id": "CSAFPID-3792088" } }, { "category": "product_version_range", "name": "vers:unknown/0.253.0", "product": { "name": "vers:unknown/0.253.0", "product_id": "CSAFPID-3792089" } }, { "category": "product_version_range", "name": "vers:unknown/0.255.0", "product": { "name": "vers:unknown/0.255.0", "product_id": "CSAFPID-3792090" } }, { "category": "product_version_range", "name": "vers:unknown/0.255.1", "product": { "name": "vers:unknown/0.255.1", "product_id": "CSAFPID-3792091" } }, { "category": "product_version_range", "name": "vers:unknown/0.255.2", "product": { "name": "vers:unknown/0.255.2", "product_id": "CSAFPID-3792092" } }, { "category": "product_version_range", "name": "vers:unknown/0.256.0", "product": { "name": "vers:unknown/0.256.0", "product_id": "CSAFPID-3792093" } }, { "category": "product_version_range", "name": "vers:unknown/0.257.0", "product": { "name": "vers:unknown/0.257.0", "product_id": "CSAFPID-3792094" } }, { "category": "product_version_range", "name": "vers:unknown/0.257.2", "product": { "name": "vers:unknown/0.257.2", "product_id": "CSAFPID-3792095" } }, { "category": "product_version_range", "name": "vers:unknown/0.258.0", "product": { "name": "vers:unknown/0.258.0", "product_id": "CSAFPID-5488657" } }, { "category": "product_version_range", "name": "vers:unknown/0.258.1", "product": { "name": "vers:unknown/0.258.1", "product_id": "CSAFPID-5488658" } }, { "category": "product_version_range", "name": "vers:unknown/0.258.10", "product": { "name": "vers:unknown/0.258.10", "product_id": "CSAFPID-5488659" } }, { "category": "product_version_range", "name": "vers:unknown/0.258.11", "product": { "name": "vers:unknown/0.258.11", "product_id": "CSAFPID-5488660" } }, { "category": "product_version_range", "name": "vers:unknown/0.258.2", "product": { "name": "vers:unknown/0.258.2", "product_id": "CSAFPID-5488661" } }, { "category": "product_version_range", "name": "vers:unknown/0.258.3", "product": { "name": "vers:unknown/0.258.3", "product_id": "CSAFPID-5488662" } }, { "category": "product_version_range", "name": "vers:unknown/0.260.0", "product": { "name": "vers:unknown/0.260.0", "product_id": "CSAFPID-5488663" } }, { "category": "product_version_range", "name": "vers:unknown/0.260.1", "product": { "name": "vers:unknown/0.260.1", "product_id": "CSAFPID-5488664" } }, { "category": "product_version_range", "name": "vers:unknown/0.260.2", "product": { "name": "vers:unknown/0.260.2", "product_id": "CSAFPID-5488665" } }, { "category": "product_version_range", "name": "vers:unknown/0.260.3", "product": { "name": "vers:unknown/0.260.3", "product_id": "CSAFPID-5488666" } }, { "category": "product_version_range", "name": "vers:unknown/0.260.4", "product": { "name": "vers:unknown/0.260.4", "product_id": "CSAFPID-5488667" } }, { "category": "product_version_range", "name": "vers:unknown/0.260.5", "product": { "name": "vers:unknown/0.260.5", "product_id": "CSAFPID-5488668" } }, { "category": "product_version_range", "name": "vers:unknown/0.260.6", "product": { "name": "vers:unknown/0.260.6", "product_id": "CSAFPID-5488669" } }, { "category": "product_version_range", "name": "vers:unknown/0.260.7", "product": { "name": "vers:unknown/0.260.7", "product_id": "CSAFPID-5488670" } }, { "category": "product_version_range", "name": "vers:unknown/0.261.0", "product": { "name": "vers:unknown/0.261.0", "product_id": "CSAFPID-5488671" } }, { "category": "product_version_range", "name": "vers:unknown/0.262.0", "product": { "name": "vers:unknown/0.262.0", "product_id": "CSAFPID-5488672" } }, { "category": "product_version_range", "name": "vers:unknown/0.262.1", "product": { "name": "vers:unknown/0.262.1", "product_id": "CSAFPID-5488673" } }, { "category": "product_version_range", "name": "vers:unknown/0.262.2", "product": { "name": "vers:unknown/0.262.2", "product_id": "CSAFPID-5488674" } }, { "category": "product_version_range", "name": "vers:unknown/0.262.3", "product": { "name": "vers:unknown/0.262.3", "product_id": "CSAFPID-5488675" } }, { "category": "product_version_range", "name": "vers:unknown/0.262.4", "product": { "name": "vers:unknown/0.262.4", "product_id": "CSAFPID-5488676" } }, { "category": "product_version_range", "name": "vers:unknown/0.262.5", "product": { "name": "vers:unknown/0.262.5", "product_id": "CSAFPID-5488677" } }, { "category": "product_version_range", "name": "vers:unknown/0.263.0", "product": { "name": "vers:unknown/0.263.0", "product_id": "CSAFPID-5488678" } }, { "category": "product_version_range", "name": "vers:unknown/0.263.1", "product": { "name": "vers:unknown/0.263.1", "product_id": "CSAFPID-5488679" } }, { "category": "product_version_range", "name": "vers:unknown/0.263.2", "product": { "name": "vers:unknown/0.263.2", "product_id": "CSAFPID-5488680" } }, { "category": "product_version_range", "name": "vers:unknown/0.263.3", "product": { "name": "vers:unknown/0.263.3", "product_id": "CSAFPID-5488681" } }, { "category": "product_version_range", "name": "vers:unknown/0.263.4", "product": { "name": "vers:unknown/0.263.4", "product_id": "CSAFPID-5488682" } }, { "category": "product_version_range", "name": "vers:unknown/0.263.6", "product": { "name": "vers:unknown/0.263.6", "product_id": "CSAFPID-5488683" } }, { "category": "product_version_range", "name": "vers:unknown/0.263.7", "product": { "name": "vers:unknown/0.263.7", "product_id": "CSAFPID-5488684" } }, { "category": "product_version_range", "name": "vers:unknown/0.263.8", "product": { "name": "vers:unknown/0.263.8", "product_id": "CSAFPID-5488685" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.0", "product": { "name": "vers:unknown/0.264.0", "product_id": "CSAFPID-5488686" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.1", "product": { "name": "vers:unknown/0.264.1", "product_id": "CSAFPID-5488687" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.2", "product": { "name": "vers:unknown/0.264.2", "product_id": "CSAFPID-5488688" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.3", "product": { "name": "vers:unknown/0.264.3", "product_id": "CSAFPID-5488689" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.4", "product": { "name": "vers:unknown/0.264.4", "product_id": "CSAFPID-5488690" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.6", "product": { "name": "vers:unknown/0.264.6", "product_id": "CSAFPID-5488691" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.7", "product": { "name": "vers:unknown/0.264.7", "product_id": "CSAFPID-5488692" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.8", "product": { "name": "vers:unknown/0.264.8", "product_id": "CSAFPID-5488693" } }, { "category": "product_version_range", "name": "vers:unknown/0.264.9", "product": { "name": "vers:unknown/0.264.9", "product_id": "CSAFPID-5488694" } }, { "category": "product_version_range", "name": "vers:unknown/0.265.0", "product": { "name": "vers:unknown/0.265.0", "product_id": "CSAFPID-5488695" } }, { "category": "product_version_range", "name": "vers:unknown/0.265.1", "product": { "name": "vers:unknown/0.265.1", "product_id": "CSAFPID-5488696" } }, { "category": "product_version_range", "name": "vers:unknown/0.300.0", "product": { "name": "vers:unknown/0.300.0", "product_id": "CSAFPID-5488697" } }, { "category": "product_version_range", "name": "vers:unknown/0.301.0", "product": { "name": "vers:unknown/0.301.0", "product_id": "CSAFPID-5756671" } }, { "category": "product_version_range", "name": "vers:unknown/0.301.1", "product": { "name": "vers:unknown/0.301.1", "product_id": "CSAFPID-5756672" } }, { "category": "product_version_range", "name": "vers:unknown/0.301.2", "product": { "name": "vers:unknown/0.301.2", "product_id": "CSAFPID-5756673" } }, { "category": "product_version_range", "name": "vers:unknown/0.4.5", "product": { "name": "vers:unknown/0.4.5", "product_id": "CSAFPID-3081305" } }, { "category": "product_version_range", "name": "vers:unknown/0.4.8", "product": { "name": "vers:unknown/0.4.8", "product_id": "CSAFPID-3081234" } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9", "product": { "name": "vers:unknown/0.4.9", "product_id": "CSAFPID-3081271" } }, { "category": "product_version_range", "name": "vers:unknown/0.80.0", "product": { "name": "vers:unknown/0.80.0", "product_id": "CSAFPID-3081300" } }, { "category": "product_version_range", "name": "vers:unknown/0.81.0", "product": { "name": "vers:unknown/0.81.0", "product_id": "CSAFPID-771854", "product_identification_helper": { "cpe": "cpe:2.3:a:nocodb:nocodb:0.81.0:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/0.81.1", "product": { "name": "vers:unknown/0.81.1", "product_id": "CSAFPID-3081232" } }, { "category": "product_version_range", "name": "vers:unknown/0.82.0", "product": { "name": "vers:unknown/0.82.0", "product_id": "CSAFPID-3081242" } }, { "category": "product_version_range", "name": "vers:unknown/0.83.0", "product": { "name": "vers:unknown/0.83.0", "product_id": "CSAFPID-3081307" } }, { "category": "product_version_range", "name": "vers:unknown/0.83.1", "product": { "name": "vers:unknown/0.83.1", "product_id": "CSAFPID-3081292" } }, { "category": "product_version_range", "name": "vers:unknown/0.83.2", "product": { "name": "vers:unknown/0.83.2", "product_id": "CSAFPID-3081295" } }, { "category": "product_version_range", "name": "vers:unknown/0.83.3", "product": { "name": "vers:unknown/0.83.3", "product_id": "CSAFPID-3081286" } }, { "category": "product_version_range", "name": "vers:unknown/0.83.4", "product": { "name": "vers:unknown/0.83.4", "product_id": "CSAFPID-3081228" } }, { "category": "product_version_range", "name": "vers:unknown/0.83.5", "product": { "name": "vers:unknown/0.83.5", "product_id": "CSAFPID-3081257" } }, { "category": "product_version_range", "name": "vers:unknown/0.83.6", "product": { "name": "vers:unknown/0.83.6", "product_id": "CSAFPID-3081247" } }, { "category": "product_version_range", "name": "vers:unknown/0.83.8", "product": { "name": "vers:unknown/0.83.8", "product_id": "CSAFPID-771853", "product_identification_helper": { "cpe": "cpe:2.3:a:nocodb:nocodb:0.83.8:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/0.84.1", "product": { "name": "vers:unknown/0.84.1", "product_id": "CSAFPID-3081230" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.10", "product": { "name": "vers:unknown/0.84.10", "product_id": "CSAFPID-3081277" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.12", "product": { "name": "vers:unknown/0.84.12", "product_id": "CSAFPID-3081252" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.13", "product": { "name": "vers:unknown/0.84.13", "product_id": "CSAFPID-3081265" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.14", "product": { "name": "vers:unknown/0.84.14", "product_id": "CSAFPID-3081220" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.15", "product": { "name": "vers:unknown/0.84.15", "product_id": "CSAFPID-3081282" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.16", "product": { "name": "vers:unknown/0.84.16", "product_id": "CSAFPID-3081290" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.2", "product": { "name": "vers:unknown/0.84.2", "product_id": "CSAFPID-3081273" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.3", "product": { "name": "vers:unknown/0.84.3", "product_id": "CSAFPID-3081308" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.6", "product": { "name": "vers:unknown/0.84.6", "product_id": "CSAFPID-3081231" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.7", "product": { "name": "vers:unknown/0.84.7", "product_id": "CSAFPID-3081281" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.8", "product": { "name": "vers:unknown/0.84.8", "product_id": "CSAFPID-3081264" } }, { "category": "product_version_range", "name": "vers:unknown/0.84.9", "product": { "name": "vers:unknown/0.84.9", "product_id": "CSAFPID-3081254" } }, { "category": "product_version_range", "name": "vers:unknown/0.9", "product": { "name": "vers:unknown/0.9", "product_id": "CSAFPID-771851", "product_identification_helper": { "cpe": "cpe:2.3:a:nocodb:nocodb:0.9:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/0.90.0", "product": { "name": "vers:unknown/0.90.0", "product_id": "CSAFPID-3081227" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.1", "product": { "name": "vers:unknown/0.90.1", "product_id": "CSAFPID-3081283" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.10", "product": { "name": "vers:unknown/0.90.10", "product_id": "CSAFPID-3081294" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.11", "product": { "name": "vers:unknown/0.90.11", "product_id": "CSAFPID-3081296" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.2", "product": { "name": "vers:unknown/0.90.2", "product_id": "CSAFPID-3081297" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.3", "product": { "name": "vers:unknown/0.90.3", "product_id": "CSAFPID-3081302" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.4", "product": { "name": "vers:unknown/0.90.4", "product_id": "CSAFPID-3081274" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.5", "product": { "name": "vers:unknown/0.90.5", "product_id": "CSAFPID-3081233" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.7", "product": { "name": "vers:unknown/0.90.7", "product_id": "CSAFPID-3081253" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.8", "product": { "name": "vers:unknown/0.90.8", "product_id": "CSAFPID-3081266" } }, { "category": "product_version_range", "name": "vers:unknown/0.90.9", "product": { "name": "vers:unknown/0.90.9", "product_id": "CSAFPID-3081278" } }, { "category": "product_version_range", "name": "vers:unknown/0.91.0", "product": { "name": "vers:unknown/0.91.0", "product_id": "CSAFPID-3081246" } }, { "category": "product_version_range", "name": "vers:unknown/0.91.1", "product": { "name": "vers:unknown/0.91.1", "product_id": "CSAFPID-3081256" } }, { "category": "product_version_range", "name": "vers:unknown/0.91.10", "product": { "name": "vers:unknown/0.91.10", "product_id": "CSAFPID-3081267" } }, { "category": "product_version_range", "name": "vers:unknown/0.91.6", "product": { "name": "vers:unknown/0.91.6", "product_id": "CSAFPID-3081306" } }, { "category": "product_version_range", "name": "vers:unknown/0.91.7", "product": { "name": "vers:unknown/0.91.7", "product_id": "CSAFPID-3081222" } }, { "category": "product_version_range", "name": "vers:unknown/0.91.8", "product": { "name": "vers:unknown/0.91.8", "product_id": "CSAFPID-3081275" } }, { "category": "product_version_range", "name": "vers:unknown/0.91.9", "product": { "name": "vers:unknown/0.91.9", "product_id": "CSAFPID-3081243" } }, { "category": "product_version_range", "name": "vers:unknown/0.92.0", "product": { "name": "vers:unknown/0.92.0", "product_id": "CSAFPID-3087285" } }, { "category": "product_version_range", "name": "vers:unknown/0.92.1", "product": { "name": "vers:unknown/0.92.1", "product_id": "CSAFPID-3087262" } }, { "category": "product_version_range", "name": "vers:unknown/0.92.2", "product": { "name": "vers:unknown/0.92.2", "product_id": "CSAFPID-3087278" } }, { "category": "product_version_range", "name": "vers:unknown/0.92.3", "product": { "name": "vers:unknown/0.92.3", "product_id": "CSAFPID-3087267" } }, { "category": "product_version_range", "name": "vers:unknown/0.92.4", "product": { "name": "vers:unknown/0.92.4", "product_id": "CSAFPID-3087271" } }, { "category": "product_version_range", "name": "vers:unknown/0.96.0", "product": { "name": "vers:unknown/0.96.0", "product_id": "CSAFPID-3087264" } }, { "category": "product_version_range", "name": "vers:unknown/0.96.1", "product": { "name": "vers:unknown/0.96.1", "product_id": "CSAFPID-3087280" } }, { "category": "product_version_range", "name": "vers:unknown/0.96.2", "product": { "name": "vers:unknown/0.96.2", "product_id": "CSAFPID-3087281" } }, { "category": "product_version_range", "name": "vers:unknown/0.96.4", "product": { "name": "vers:unknown/0.96.4", "product_id": "CSAFPID-3087273" } }, { "category": "product_version_range", "name": "vers:unknown/0.97.0", "product": { "name": "vers:unknown/0.97.0", "product_id": "CSAFPID-3087279" } }, { "category": "product_version_range", "name": "vers:unknown/0.98.1", "product": { "name": "vers:unknown/0.98.1", "product_id": "CSAFPID-3792096" } }, { "category": "product_version_range", "name": "vers:unknown/0.98.2", "product": { "name": "vers:unknown/0.98.2", "product_id": "CSAFPID-3792097" } }, { "category": "product_version_range", "name": "vers:unknown/0.98.3", "product": { "name": "vers:unknown/0.98.3", "product_id": "CSAFPID-3792098" } }, { "category": "product_version_range", "name": "vers:unknown/0.98.4", "product": { "name": "vers:unknown/0.98.4", "product_id": "CSAFPID-3792099" } }, { "category": "product_version_range", "name": "vers:unknown/0.99.0", "product": { "name": "vers:unknown/0.99.0", "product_id": "CSAFPID-3792100" } }, { "category": "product_version_range", "name": "vers:unknown/0.99.1", "product": { "name": "vers:unknown/0.99.1", "product_id": "CSAFPID-3792101" } }, { "category": "product_version_range", "name": "vers:unknown/0.99.2", "product": { "name": "vers:unknown/0.99.2", "product_id": "CSAFPID-3792102" } }, { "category": "product_version_range", "name": "vers:unknown/<0.301.3", "product": { "name": "vers:unknown/<0.301.3", "product_id": "CSAFPID-5753711", "product_identification_helper": { "cpe": "cpe:2.3:a:nocodb:nocodb:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<0.301.3", "product": { "name": "vers:unknown/>=0|<0.301.3", "product_id": "CSAFPID-5758981" } }, { "category": "product_version_range", "name": "vers:unknown/v0.10.0", "product": { "name": "vers:unknown/v0.10.0", "product_id": "CSAFPID-3792103" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.2", "product": { "name": "vers:unknown/v0.4.2", "product_id": "CSAFPID-3792104" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.4", "product": { "name": "vers:unknown/v0.4.4", "product_id": "CSAFPID-3792105" } } ], "category": "product_name", "name": "NocoDB" } ], "category": "vendor", "name": "NocoDB" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-28359", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Editor role can inject arbitrary HTML into Rich Text cells by bypassing the TipTap editor and sending raw HTML via the API. This issue has been patched in version 0.301.3.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-28359" }, { "category": "description", "text": "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Editor role can inject arbitrary HTML into Rich Text cells by bypassing the TipTap editor and sending raw HTML via the API. This issue has been patched in version 0.301.3.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-28359" }, { "category": "description", "text": "### Summary\nAn authenticated user with Editor role can inject arbitrary HTML into Rich Text cells by bypassing the TipTap editor and sending raw HTML via the API.\n\n### Details\nThe TipTap editor sanitizes HTML client-side, but the backend stores raw HTML without server-side sanitization. The stored content is rendered via `v-html` in `TextArea.vue` through `NcMarkdownParser.parse()` which performs no sanitization.\n\n### Impact\nStored XSS — malicious scripts execute for any user viewing the cell.\n\n### Credit\nThis issue was reported by [@Akokonunes](https://github.com/Akokonunes).", "title": "github - https://github.com/advisories/GHSA-qxwq-q265-hc44" }, { "category": "description", "text": "NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Editor role can inject arbitrary HTML into Rich Text cells by bypassing the TipTap editor and sending raw HTML via the API. This issue has been patched in version 0.301.3.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-28359.json?alt=media" }, { "category": "description", "text": "### Summary\nAn authenticated user with Editor role can inject arbitrary HTML into Rich Text cells by bypassing the TipTap editor and sending raw HTML via the API.\n\n### Details\nThe TipTap editor sanitizes HTML client-side, but the backend stores raw HTML without server-side sanitization. The stored content is rendered via `v-html` in `TextArea.vue` through `NcMarkdownParser.parse()` which performs no sanitization.\n\n### Impact\nStored XSS — malicious scripts execute for any user viewing the cell.\n\n### Credit\nThis issue was reported by [@Akokonunes](https://github.com/Akokonunes).", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-qxwq-q265-hc44.json?alt=media" }, { "category": "other", "text": "0.0003", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N", "title": "CVSSV4" }, { "category": "other", "text": "5.3", "title": "CVSSV4 base score" }, { "category": "other", "text": "3.8", "title": "NCSC Score" }, { "category": "other", "text": "The value of the most recent EPSS score, The value of the most recent CVSS (V3) score, Is related to (a version of) an uncommon product, Is related to CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5753711", "CSAFPID-771851", "CSAFPID-771853", "CSAFPID-771854", "CSAFPID-1165368", "CSAFPID-3081218", "CSAFPID-3081219", "CSAFPID-3081220", "CSAFPID-3081221", "CSAFPID-3081222", "CSAFPID-3081223", "CSAFPID-3081224", "CSAFPID-3081225", "CSAFPID-3081227", "CSAFPID-3081228", "CSAFPID-3081229", "CSAFPID-3081230", "CSAFPID-3081231", "CSAFPID-3081232", "CSAFPID-3081233", "CSAFPID-3081234", "CSAFPID-3081235", "CSAFPID-3081236", "CSAFPID-3081237", "CSAFPID-3081238", "CSAFPID-3081239", "CSAFPID-3081240", "CSAFPID-3081241", "CSAFPID-3081242", "CSAFPID-3081243", "CSAFPID-3081244", "CSAFPID-3081245", "CSAFPID-3081246", "CSAFPID-3081247", "CSAFPID-3081248", "CSAFPID-3081249", "CSAFPID-3081250", "CSAFPID-3081251", "CSAFPID-3081252", "CSAFPID-3081253", "CSAFPID-3081254", "CSAFPID-3081256", "CSAFPID-3081257", "CSAFPID-3081258", "CSAFPID-3081259", "CSAFPID-3081260", "CSAFPID-3081261", "CSAFPID-3081262", "CSAFPID-3081264", "CSAFPID-3081265", "CSAFPID-3081266", "CSAFPID-3081267", "CSAFPID-3081268", "CSAFPID-3081269", "CSAFPID-3081271", "CSAFPID-3081272", "CSAFPID-3081273", "CSAFPID-3081274", "CSAFPID-3081275", "CSAFPID-3081276", "CSAFPID-3081277", "CSAFPID-3081278", "CSAFPID-3081279", "CSAFPID-3081280", "CSAFPID-3081281", "CSAFPID-3081282", "CSAFPID-3081283", "CSAFPID-3081284", "CSAFPID-3081285", "CSAFPID-3081286", "CSAFPID-3081287", "CSAFPID-3081288", "CSAFPID-3081289", "CSAFPID-3081290", "CSAFPID-3081291", "CSAFPID-3081292", "CSAFPID-3081293", "CSAFPID-3081294", "CSAFPID-3081295", "CSAFPID-3081296", "CSAFPID-3081297", "CSAFPID-3081298", "CSAFPID-3081299", "CSAFPID-3081300", "CSAFPID-3081301", "CSAFPID-3081302", "CSAFPID-3081303", "CSAFPID-3081304", "CSAFPID-3081305", "CSAFPID-3081306", "CSAFPID-3081307", "CSAFPID-3081308", "CSAFPID-3081310", "CSAFPID-3081311", "CSAFPID-3081312", "CSAFPID-3081313", "CSAFPID-3087262", "CSAFPID-3087263", "CSAFPID-3087264", "CSAFPID-3087265", "CSAFPID-3087266", "CSAFPID-3087267", "CSAFPID-3087268", "CSAFPID-3087269", "CSAFPID-3087270", "CSAFPID-3087271", "CSAFPID-3087272", "CSAFPID-3087273", "CSAFPID-3087274", "CSAFPID-3087275", "CSAFPID-3087276", "CSAFPID-3087277", "CSAFPID-3087278", "CSAFPID-3087279", "CSAFPID-3087280", "CSAFPID-3087281", "CSAFPID-3087282", "CSAFPID-3087283", "CSAFPID-3087284", "CSAFPID-3087285", "CSAFPID-3087286", "CSAFPID-3087287", "CSAFPID-3087288", "CSAFPID-3087289", "CSAFPID-3792031", "CSAFPID-3792032", "CSAFPID-3792033", "CSAFPID-3792034", "CSAFPID-3792035", "CSAFPID-3792036", "CSAFPID-3792037", "CSAFPID-3792038", "CSAFPID-3792039", "CSAFPID-3792040", "CSAFPID-3792041", "CSAFPID-3792042", "CSAFPID-3792043", "CSAFPID-3792044", "CSAFPID-3792045", "CSAFPID-3792046", "CSAFPID-3792047", "CSAFPID-3792048", "CSAFPID-3792049", "CSAFPID-3792050", "CSAFPID-3792051", "CSAFPID-3792052", "CSAFPID-3792053", "CSAFPID-3792054", "CSAFPID-3792055", "CSAFPID-3792056", "CSAFPID-3792057", "CSAFPID-3792058", "CSAFPID-3792059", "CSAFPID-3792060", "CSAFPID-3792061", "CSAFPID-3792062", "CSAFPID-3792063", "CSAFPID-3792064", "CSAFPID-3792065", "CSAFPID-3792066", "CSAFPID-3792067", "CSAFPID-3792068", "CSAFPID-3792069", "CSAFPID-3792070", "CSAFPID-3792071", "CSAFPID-3792072", "CSAFPID-3792073", "CSAFPID-3792074", "CSAFPID-3792075", "CSAFPID-3792076", "CSAFPID-3792077", "CSAFPID-3792078", "CSAFPID-3792079", "CSAFPID-3792080", "CSAFPID-3792081", "CSAFPID-3792082", "CSAFPID-3792083", "CSAFPID-3792084", "CSAFPID-3792085", "CSAFPID-3792086", "CSAFPID-3792087", "CSAFPID-3792088", "CSAFPID-3792089", "CSAFPID-3792090", "CSAFPID-3792091", "CSAFPID-3792092", "CSAFPID-3792093", "CSAFPID-3792094", "CSAFPID-3792095", "CSAFPID-3792096", "CSAFPID-3792097", "CSAFPID-3792098", "CSAFPID-3792099", "CSAFPID-3792100", "CSAFPID-3792101", "CSAFPID-3792102", "CSAFPID-3792103", "CSAFPID-3792104", "CSAFPID-3792105", "CSAFPID-5488657", "CSAFPID-5488658", "CSAFPID-5488659", "CSAFPID-5488660", "CSAFPID-5488661", "CSAFPID-5488662", "CSAFPID-5488663", "CSAFPID-5488664", "CSAFPID-5488665", "CSAFPID-5488666", "CSAFPID-5488667", "CSAFPID-5488668", "CSAFPID-5488669", "CSAFPID-5488670", "CSAFPID-5488671", "CSAFPID-5488672", "CSAFPID-5488673", "CSAFPID-5488674", "CSAFPID-5488675", "CSAFPID-5488676", "CSAFPID-5488677", "CSAFPID-5488678", "CSAFPID-5488679", "CSAFPID-5488680", "CSAFPID-5488681", "CSAFPID-5488682", "CSAFPID-5488683", "CSAFPID-5488684", "CSAFPID-5488685", "CSAFPID-5488686", "CSAFPID-5488687", "CSAFPID-5488688", "CSAFPID-5488689", "CSAFPID-5488690", "CSAFPID-5488691", "CSAFPID-5488692", "CSAFPID-5488693", "CSAFPID-5488694", "CSAFPID-5488695", "CSAFPID-5488696", "CSAFPID-5488697", "CSAFPID-5756671", "CSAFPID-5756672", "CSAFPID-5756673", "CSAFPID-5758981" ] }, "references": [ { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28359" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/28xxx/CVE-2026-28359.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28359" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-28359" }, { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-qxwq-q265-hc44" }, { "category": "external", "summary": "Source raw - github", "url": "https://api.github.com/advisories/GHSA-qxwq-q265-hc44" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-28359.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-28359" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-qxwq-q265-hc44.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/nocodb/nocodb/security/advisories/GHSA-qxwq-q265-hc44" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/nocodb/nocodb/releases/tag/0.301.3" }, { "category": "external", "summary": "Reference - github; osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28359" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-qxwq-q265-hc44" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28359.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1165368", "CSAFPID-3081218", "CSAFPID-3081219", "CSAFPID-3081220", "CSAFPID-3081221", "CSAFPID-3081222", "CSAFPID-3081223", "CSAFPID-3081224", "CSAFPID-3081225", "CSAFPID-3081227", "CSAFPID-3081228", "CSAFPID-3081229", "CSAFPID-3081230", "CSAFPID-3081231", "CSAFPID-3081232", "CSAFPID-3081233", "CSAFPID-3081234", "CSAFPID-3081235", "CSAFPID-3081236", "CSAFPID-3081237", "CSAFPID-3081238", "CSAFPID-3081239", "CSAFPID-3081240", "CSAFPID-3081241", "CSAFPID-3081242", "CSAFPID-3081243", "CSAFPID-3081244", "CSAFPID-3081245", "CSAFPID-3081246", "CSAFPID-3081247", "CSAFPID-3081248", "CSAFPID-3081249", "CSAFPID-3081250", "CSAFPID-3081251", "CSAFPID-3081252", "CSAFPID-3081253", "CSAFPID-3081254", "CSAFPID-3081256", "CSAFPID-3081257", "CSAFPID-3081258", "CSAFPID-3081259", "CSAFPID-3081260", "CSAFPID-3081261", "CSAFPID-3081262", "CSAFPID-3081264", "CSAFPID-3081265", "CSAFPID-3081266", "CSAFPID-3081267", "CSAFPID-3081268", "CSAFPID-3081269", "CSAFPID-3081271", "CSAFPID-3081272", "CSAFPID-3081273", "CSAFPID-3081274", "CSAFPID-3081275", "CSAFPID-3081276", "CSAFPID-3081277", "CSAFPID-3081278", "CSAFPID-3081279", "CSAFPID-3081280", "CSAFPID-3081281", "CSAFPID-3081282", "CSAFPID-3081283", "CSAFPID-3081284", "CSAFPID-3081285", "CSAFPID-3081286", "CSAFPID-3081287", "CSAFPID-3081288", "CSAFPID-3081289", "CSAFPID-3081290", "CSAFPID-3081291", "CSAFPID-3081292", "CSAFPID-3081293", "CSAFPID-3081294", "CSAFPID-3081295", "CSAFPID-3081296", "CSAFPID-3081297", "CSAFPID-3081298", "CSAFPID-3081299", "CSAFPID-3081300", "CSAFPID-3081301", "CSAFPID-3081302", "CSAFPID-3081303", "CSAFPID-3081304", "CSAFPID-3081305", "CSAFPID-3081306", "CSAFPID-3081307", "CSAFPID-3081308", "CSAFPID-3081310", "CSAFPID-3081311", "CSAFPID-3081312", "CSAFPID-3081313", "CSAFPID-3087262", "CSAFPID-3087263", "CSAFPID-3087264", "CSAFPID-3087265", "CSAFPID-3087266", "CSAFPID-3087267", "CSAFPID-3087268", "CSAFPID-3087269", "CSAFPID-3087270", "CSAFPID-3087271", "CSAFPID-3087272", "CSAFPID-3087273", "CSAFPID-3087274", "CSAFPID-3087275", "CSAFPID-3087276", "CSAFPID-3087277", "CSAFPID-3087278", "CSAFPID-3087279", "CSAFPID-3087280", "CSAFPID-3087281", "CSAFPID-3087282", "CSAFPID-3087283", "CSAFPID-3087284", "CSAFPID-3087285", "CSAFPID-3087286", "CSAFPID-3087287", "CSAFPID-3087288", "CSAFPID-3087289", "CSAFPID-3792031", "CSAFPID-3792032", "CSAFPID-3792033", "CSAFPID-3792034", "CSAFPID-3792035", "CSAFPID-3792036", "CSAFPID-3792037", "CSAFPID-3792038", "CSAFPID-3792039", "CSAFPID-3792040", "CSAFPID-3792041", "CSAFPID-3792042", "CSAFPID-3792043", "CSAFPID-3792044", "CSAFPID-3792045", "CSAFPID-3792046", "CSAFPID-3792047", "CSAFPID-3792048", "CSAFPID-3792049", "CSAFPID-3792050", "CSAFPID-3792051", "CSAFPID-3792052", "CSAFPID-3792053", "CSAFPID-3792054", "CSAFPID-3792055", "CSAFPID-3792056", "CSAFPID-3792057", "CSAFPID-3792058", "CSAFPID-3792059", "CSAFPID-3792060", "CSAFPID-3792061", "CSAFPID-3792062", "CSAFPID-3792063", "CSAFPID-3792064", "CSAFPID-3792065", "CSAFPID-3792066", "CSAFPID-3792067", "CSAFPID-3792068", "CSAFPID-3792069", "CSAFPID-3792070", "CSAFPID-3792071", "CSAFPID-3792072", "CSAFPID-3792073", "CSAFPID-3792074", "CSAFPID-3792075", "CSAFPID-3792076", "CSAFPID-3792077", "CSAFPID-3792078", "CSAFPID-3792079", "CSAFPID-3792080", "CSAFPID-3792081", "CSAFPID-3792082", "CSAFPID-3792083", "CSAFPID-3792084", "CSAFPID-3792085", "CSAFPID-3792086", "CSAFPID-3792087", "CSAFPID-3792088", "CSAFPID-3792089", "CSAFPID-3792090", "CSAFPID-3792091", "CSAFPID-3792092", "CSAFPID-3792093", "CSAFPID-3792094", "CSAFPID-3792095", "CSAFPID-3792096", "CSAFPID-3792097", "CSAFPID-3792098", "CSAFPID-3792099", "CSAFPID-3792100", "CSAFPID-3792101", "CSAFPID-3792102", "CSAFPID-3792103", "CSAFPID-3792104", "CSAFPID-3792105", "CSAFPID-5488657", "CSAFPID-5488658", "CSAFPID-5488659", "CSAFPID-5488660", "CSAFPID-5488661", "CSAFPID-5488662", "CSAFPID-5488663", "CSAFPID-5488664", "CSAFPID-5488665", "CSAFPID-5488666", "CSAFPID-5488667", "CSAFPID-5488668", "CSAFPID-5488669", "CSAFPID-5488670", "CSAFPID-5488671", "CSAFPID-5488672", "CSAFPID-5488673", "CSAFPID-5488674", "CSAFPID-5488675", "CSAFPID-5488676", "CSAFPID-5488677", "CSAFPID-5488678", "CSAFPID-5488679", "CSAFPID-5488680", "CSAFPID-5488681", "CSAFPID-5488682", "CSAFPID-5488683", "CSAFPID-5488684", "CSAFPID-5488685", "CSAFPID-5488686", "CSAFPID-5488687", "CSAFPID-5488688", "CSAFPID-5488689", "CSAFPID-5488690", "CSAFPID-5488691", "CSAFPID-5488692", "CSAFPID-5488693", "CSAFPID-5488694", "CSAFPID-5488695", "CSAFPID-5488696", "CSAFPID-5488697", "CSAFPID-5753711", "CSAFPID-5756671", "CSAFPID-5756672", "CSAFPID-5756673", "CSAFPID-5758981", "CSAFPID-771851", "CSAFPID-771853", "CSAFPID-771854" ] } ], "title": "CVE-2026-28359" } ] }