https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 03:56:53 +0000 https://cve.radiocsirt.org/vuln/cve-2025-27506 <p><strong>Affected:</strong> nocodb</p> <p>NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vulnerable to Reflected Cross-Site-Scripting. The endpoint /api/v1/db/auth/password/reset/:tokenId is vulnerable to Reflected Cross-Site-Scripting. The flaw occurs due to implementation of the client-side template engine ejs, specifically on file resetPassword.ts where the template is using the insecure function “&lt;%-“, which is rendered by the function renderPasswordReset. This vulnerability is fixed in 0.258.0.</p> <p><strong>Affected:</strong> nocodb</p> <p>NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vulnerable to Reflected Cross-Site-Scripting. The endpoint /api/v1/db/auth/password/reset/:tokenId is vulnerable to Reflected Cross-Site-Scripting. The flaw occurs due to implementation of the client-side template engine ejs, specifically on file resetPassword.ts where the template is using the insecure function “&lt;%-“, which is rendered by the function renderPasswordReset. This vulnerability is fixed in 0.258.0.</p> https://cve.radiocsirt.org/vuln/cve-2025-27506