Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enable stored XSS. This issue has been patched in version 0.301.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-28397 Stored XSS Vulnerability in NocoDB Prior to Version 0.301.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28397
Post summary
A stored XSS vulnerability (CVE-2026-28397) exists in NocoDB versions prior to 0.301.3, as reported by Vulmon.
🚨*CVE* CVE-2026-28397 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enable stored XSS. This issue h… https://www.cve.org/CVERecord?id=CVE-2026-28397 ----- Traducción: CVE-2026-28397 Noc… http://infoflow.cloud`
Post summary
The post announces CVE-2026-28397, a stored XSS vulnerability in NocoDB prior to v0.301.3, providing technical details but no PoC, exploit, or patch information.
CVE-2026-28397 NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, comments rendered via v-html without sanitization enable stored XSS. This issue h… https://www.cve.org/CVERecord?id=CVE-2026-28397
Post summary
The CVE describes a stored XSS vulnerability in NocoDB caused by unsanitized v-html rendering in comments prior to version 0.301.3.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nocodb | nocodb | - | - | - |