CVE-2026-47379Disclosure

LOWCVSS 6.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared-view password check fell back to strict-equality (===) comparison for legacy plaintext passwords, leaking the password's length and per-character prefix through response timing. This vulnerability is fixed in 2026.05.1.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://github.com/nocodb/nocodb/security/advisories/GHSA-qhxg-623c-cfjm

Weakness type (CWE)

CWE-200CWE-203

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-47379 NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared-view password check fell back to strict-equality (===) comparison for legacy… https://www.cve.org/CVERecord?id=CVE-2026-47379 ----- Traducción: CVE-2026-47379 Noc… http://infoflow.cloud`
Post summary
A concise announcement of CVE-2026-47379 in NocoDB, highlighting a password check flaw relying on strict-equality comparison before version 2026.05.1, with an accompanying link to the CVE record.
0000027
88 followersView on X
CVE@CVEnew92d
Patch
CVE-2026-47379 NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared-view password check fell back to strict-equality (===) comparison for legacy… https://www.cve.org/CVERecord?id=CVE-2026-47379
Post summary
The CVE describes a flaw in NocoDB's shared‑view password check, which is remedied in version 2026.05.1, with no evidence of exploitation or PoC.
00000673
57.7K followersView on X

Explore more

Back to dashboard