https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 06:55:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274081 EUVD-2026-274081 https://cve.radiocsirt.org/vuln/euvd-2026-274081 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28398 <p>NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rendered via v-html without sanitization, enabling stored XSS. This issue has been patched in version 0.301.3.</p> <p>NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, user-controlled content in comments and rich text cells was rendered via v-html without sanitization, enabling stored XSS. This issue has been patched in version 0.301.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28398 https://cve.radiocsirt.org/vuln/ghsa-8vm4-g489-v3w7 <p><strong>Affected:</strong> npm: nocodb</p> <p>### Summary User-controlled content in comments and rich text cells was rendered via `v-html` without sanitization, enabling stored XSS.</p> <p>### Details Comments in `Comments.vue` and rich text in `TextArea.vue` were parsed by markdown-it with `html: true` and injected via `v-html`. The codebase had `vue-dompurify-html` available but these paths used raw `v-html`. Server-side, `Comment.insert()` used `extractProps()` instead of `extractPropsAndSanitize()`.</p> <p>Commenter role is sufficient for the comments vector; Editor role for rich text.</p> <p>This issue was independently reported; see also GHSA-rcph-x7mj-54mm and GHSA-wwp2-x4rj-j8rm for the same root cause found by GitHub Security Lab.</p> <p>### Impact Stored XSS — malicious scripts execute for any user viewing the comment or cell.</p> <p>### Credit This issue was reported by [@bugbunny-research](https://github.com/bugbunny-research) (bugbunny.ai).</p> <p><strong>Affected:</strong> npm: nocodb</p> <p>### Summary User-controlled content in comments and rich text cells was rendered via `v-html` without sanitization, enabling stored XSS.</p> <p>### Details Comments in `Comments.vue` and rich text in `TextArea.vue` were parsed by markdown-it with `html: true` and injected via `v-html`. The codebase had `vue-dompurify-html` available but these paths used raw `v-html`. Server-side, `Comment.insert()` used `extractProps()` instead of `extractPropsAndSanitize()`.</p> <p>Commenter role is sufficient for the comments vector; Editor role for rich text.</p> <p>This issue was independently reported; see also GHSA-rcph-x7mj-54mm and GHSA-wwp2-x4rj-j8rm for the same root cause found by GitHub Security Lab.</p> <p>### Impact Stored XSS — malicious scripts execute for any user viewing the comment or cell.</p> <p>### Credit This issue was reported by [@bugbunny-research](https://github.com/bugbunny-research) (bugbunny.ai).</p> https://cve.radiocsirt.org/vuln/ghsa-8vm4-g489-v3w7