VULNERABILITY INTELLIGENCE

CVE-2026-47380

EPSS probability0.31%
CISA KEVNot currently listed
Published2026-06-23
Last modified2026-06-25

Description

NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-user branch returned without performing a password hash comparison. This vulnerability is fixed in 2026.04.1.

Weakness classification

  • security-advisories@github.com: CWE-208

Primary references