CVE-2026-28361

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the MCP token service did not validate token ownership, allowing a Creator within the same base to read, regenerate, or delete another user's MCP tokens if the token ID was known. This issue has been patched in version 0.301.3.

Published Mar 3, 2026

https://github.com/advisories/GHSA-p9x3-w98f-7j3q

CVSS ScoreMedium

6.3

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2026-28361

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the MCP token service did not validate token ownership, allowing a Creator within the same base to read, regenerate, or delete another user's MCP tokens if the token ID was known. This issue has been patched in version 0.301.3.

Published Mar 3, 2026

https://github.com/advisories/GHSA-p9x3-w98f-7j3q

CVSS ScoreMedium

6.3


npm	nocodb	0.0.1
npm	nocodb	0.1.29
npm	nocodb	0.1.30
npm	nocodb	0.1.31
npm	nocodb	0.1.32
npm	nocodb	0.1.33
npm	nocodb	0.1.34
npm	nocodb	0.1.35
npm	nocodb	0.1.36
npm	nocodb	0.1.37
npm	nocodb	0.1.38
npm	nocodb	0.10.0
npm	nocodb	0.10.1
npm	nocodb	0.10.2
npm	nocodb	0.10.3
npm	nocodb	0.10.4
npm	nocodb	0.10.5
npm	nocodb	0.10.6
npm	nocodb	0.100.0
npm	nocodb	0.100.1
npm	nocodb	0.100.2
npm	nocodb	0.101.0-beta.0
npm	nocodb	0.101.0
npm	nocodb	0.101.1
npm	nocodb	0.101.2
npm	nocodb	0.104.0
npm	nocodb	0.104.1
npm	nocodb	0.104.2
npm	nocodb	0.104.3
npm	nocodb	0.105.0
npm	nocodb	0.105.1
npm	nocodb	0.105.2
npm	nocodb	0.105.3
npm	nocodb	0.106.0-beta.0
npm	nocodb	0.106.0-beta.1
npm	nocodb	0.106.0
npm	nocodb	0.106.1
npm	nocodb	0.107.0-beta.0
npm	nocodb	0.107.0-beta.1
npm	nocodb	0.107.0
npm	nocodb	0.107.1
npm	nocodb	0.107.2
npm	nocodb	0.107.3
npm	nocodb	0.107.4
npm	nocodb	0.107.5
npm	nocodb	0.108.0-beta.0
npm	nocodb	0.108.0
npm	nocodb	0.108.1
npm	nocodb	0.109.0
npm	nocodb	0.109.1

Ecosystem	Package	Version


npm	nocodb	0.0.1
npm	nocodb	0.1.29
npm	nocodb	0.1.30
npm	nocodb	0.1.31
npm	nocodb	0.1.32
npm	nocodb	0.1.33
npm	nocodb	0.1.34
npm	nocodb	0.1.35
npm	nocodb	0.1.36
npm	nocodb	0.1.37
npm	nocodb	0.1.38
npm	nocodb	0.10.0
npm	nocodb	0.10.1
npm	nocodb	0.10.2
npm	nocodb	0.10.3
npm	nocodb	0.10.4
npm	nocodb	0.10.5
npm	nocodb	0.10.6
npm	nocodb	0.100.0
npm	nocodb	0.100.1
npm	nocodb	0.100.2
npm	nocodb	0.101.0-beta.0
npm	nocodb	0.101.0
npm	nocodb	0.101.1
npm	nocodb	0.101.2
npm	nocodb	0.104.0
npm	nocodb	0.104.1
npm	nocodb	0.104.2
npm	nocodb	0.104.3
npm	nocodb	0.105.0
npm	nocodb	0.105.1
npm	nocodb	0.105.2
npm	nocodb	0.105.3
npm	nocodb	0.106.0-beta.0
npm	nocodb	0.106.0-beta.1
npm	nocodb	0.106.0
npm	nocodb	0.106.1
npm	nocodb	0.107.0-beta.0
npm	nocodb	0.107.0-beta.1
npm	nocodb	0.107.0
npm	nocodb	0.107.1
npm	nocodb	0.107.2
npm	nocodb	0.107.3
npm	nocodb	0.107.4
npm	nocodb	0.107.5
npm	nocodb	0.108.0-beta.0
npm	nocodb	0.108.0
npm	nocodb	0.108.1
npm	nocodb	0.109.0
npm	nocodb	0.109.1

Find vulnerabilities. Fix fast with AI.

CVE-2026-28361

CVE-2026-28361