Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 03:17:50 +0000 EUVD-2026-274079 https://cve.radiocsirt.org/vuln/euvd-2026-274079 EUVD-2026-274079 https://cve.radiocsirt.org/vuln/euvd-2026-274079 fkie_cve-2026-28399 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28399 <p>NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbitrary SQL via the DATEADD formula&#39;s unit parameter. This issue has been patched in version 0.301.3.</p> <p>NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, an authenticated user with Creator role can inject arbitrary SQL via the DATEADD formula&#39;s unit parameter. This issue has been patched in version 0.301.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-28399 GHSA-45rp-9p97-h852 — NocoDB Vulnerable to SQL Injection via DATEADD Formula https://cve.radiocsirt.org/vuln/ghsa-45rp-9p97-h852 <p><strong>Affected:</strong> npm: nocodb</p> <p>### Summary An authenticated user with Creator role can inject arbitrary SQL via the DATEADD formula&#39;s unit parameter.</p> <p>### Details The third argument (unit) of `DATEADD` was interpolated directly into `knex.raw()` queries after only stripping quote characters. Validation in `formulas.ts` only checked `Literal` AST node types — non-Literal types bypassed validation entirely. Affected MySQL, PostgreSQL, and SQLite function mappings.</p> <p>### Impact SQL injection allowing data exfiltration or modification, scoped to the connected database.</p> <p>### Credit This issue was reported by [@q1uf3ng](https://github.com/q1uf3ng).</p> <p><strong>Affected:</strong> npm: nocodb</p> <p>### Summary An authenticated user with Creator role can inject arbitrary SQL via the DATEADD formula&#39;s unit parameter.</p> <p>### Details The third argument (unit) of `DATEADD` was interpolated directly into `knex.raw()` queries after only stripping quote characters. Validation in `formulas.ts` only checked `Literal` AST node types — non-Literal types bypassed validation entirely. Affected MySQL, PostgreSQL, and SQLite function mappings.</p> <p>### Impact SQL injection allowing data exfiltration or modification, scoped to the connected database.</p> <p>### Credit This issue was reported by [@q1uf3ng](https://github.com/q1uf3ng).</p> https://cve.radiocsirt.org/vuln/ghsa-45rp-9p97-h852