https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:21:28.680653+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-53930 CVE-2026-53930 — NocoDB: Server-Side Request Forgery via Base Migration URL 2026-10-08T12:21:28.696095+00:00

Affected: nocodb

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the base-migration endpoint accepted a caller-supplied URL that the migration worker dereferenced without enforcing protocol or destination, allowing scheme abuse (file:, ftp:, etc.) and probing of internal HTTP destinations. This vulnerability is fixed in 2026.05.1.