CVE-2026-47380
LOW SEVERITYVulnerability Description
NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-user branch returned without performing a password hash comparison. This vulnerability is fixed in 2026.04.1.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-208
Source
GitHub
Vendor
npm
Product
nocodb
Discussion (0)
Add Comment
No comments yet. Be the first!