CVE-2026-28401

Description

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, rich text cell content rendered via v-html without sanitization enables stored XSS. This issue has been patched in version 0.301.3.

Affected Platforms

Weakness Type

CWE-79

References

• https://github.com/nocodb/nocodb/releases/tag/0.301.3
• https://github.com/nocodb/nocodb/security/advisories/GHSA-wwp2-x4rj-j8rm