CVE-2023-43794

npm/nocodb CVE-2023-43794: medium 6.5, EPSS 0.87%

nocodb SQL Injection vulnerability

Action: Upgrade nocodb to 0.111.0 or later.

npm i nocodb@0.111.0

Affected

Fixed versions

Sources

• osv: GHSA-3m5q-q39v-xf8f
• https://github.com/nocodb/nocodb/security/advisories/GHSA-3m5q-q39v-xf8f
• https://nvd.nist.gov/vuln/detail/CVE-2023-43794
• https://github.com/nocodb/nocodb
• https://github.com/nocodb/nocodb/blob/3ec82824eeb2295f6b67fd67e7d6049784b41221/packages/nocodb/src/controllers/tables.controller.ts#L63
• https://github.com/nocodb/nocodb/blob/3ec82824eeb2295f6b67fd67e7d6049784b41221/packages/nocodb/src/db/sql-client/lib/sqlite/SqliteClient.ts#L628-L654
• https://github.com/nocodb/nocodb/blob/3ec82824eeb2295f6b67fd67e7d6049784b41221/packages/nocodb/src/db/sql-client/lib/sqlite/SqliteClient.ts#L637

CVE-2023-43794 · published 2023-10-17T13:52:09Z · modified 2026-09-10T03:49:24.652161352Z · JSON