{"action":"Upgrade nocodb to 0.111.0 or later.","affected":[{"fixed":"0.111.0","introduced":"0"}],"component":"nocodb","cve_ids":["CVE-2023-43794"],"ecosystem":"npm","epss":0.00873,"exploited":false,"fixed_versions":["0.111.0"],"ghsa_id":"GHSA-3m5q-q39v-xf8f","id":"tcs_01M5KEXPTBNX61MR96DMS57VC5","modified_at":"2026-09-10T03:49:24.652161352Z","published_at":"2023-10-17T13:52:09Z","references":["https://osv.dev/vulnerability/GHSA-3m5q-q39v-xf8f","https://github.com/nocodb/nocodb/security/advisories/GHSA-3m5q-q39v-xf8f","https://nvd.nist.gov/vuln/detail/CVE-2023-43794","https://github.com/nocodb/nocodb","https://github.com/nocodb/nocodb/blob/3ec82824eeb2295f6b67fd67e7d6049784b41221/packages/nocodb/src/controllers/tables.controller.ts#L63","https://github.com/nocodb/nocodb/blob/3ec82824eeb2295f6b67fd67e7d6049784b41221/packages/nocodb/src/db/sql-client/lib/sqlite/SqliteClient.ts#L628-L654","https://github.com/nocodb/nocodb/blob/3ec82824eeb2295f6b67fd67e7d6049784b41221/packages/nocodb/src/db/sql-client/lib/sqlite/SqliteClient.ts#L637"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-3m5q-q39v-xf8f","url":"https://osv.dev/vulnerability/GHSA-3m5q-q39v-xf8f"}],"summary":"nocodb SQL Injection vulnerability"}