https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:46:15 +0000 https://cve.radiocsirt.org/vuln/cve-2026-47279 <p><strong>Affected:</strong> nocodb</p> <p>NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the public shared-view relation endpoints accepted a caller-supplied column ID without verifying that the column was visible in the shared view, so anyone holding a share UUID could read links from any LTAR column on the view&#39;s table — including columns the view owner had hidden. publicMmList, publicHmList, and relDataList already ensured that the requested column belonged to the view&#39;s model, but did not check the view-column entry&#39;s show flag. This vulnerability is fixed in 2026.05.1.</p> <p><strong>Affected:</strong> nocodb</p> <p>NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the public shared-view relation endpoints accepted a caller-supplied column ID without verifying that the column was visible in the shared view, so anyone holding a share UUID could read links from any LTAR column on the view&#39;s table — including columns the view owner had hidden. publicMmList, publicHmList, and relDataList already ensured that the requested column belonged to the view&#39;s model, but did not check the view-column entry&#39;s show flag. This vulnerability is fixed in 2026.05.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-47279