{"action":"Upgrade nocodb to 0.202.9 or later.","affected":[{"fixed":"0.202.9","introduced":"0"}],"component":"nocodb","cve_ids":["CVE-2023-49781"],"ecosystem":"npm","epss":0.00606,"exploited":false,"fixed_versions":["0.202.9"],"ghsa_id":"GHSA-h6r4-xvw6-jc5h","id":"tcs_01M5KFTCHR9JCPT66DTPXMJ7KJ","modified_at":"2025-08-21T19:15:36Z","published_at":"2024-05-13T19:59:07Z","references":["https://osv.dev/vulnerability/GHSA-h6r4-xvw6-jc5h","https://github.com/nocodb/nocodb/security/advisories/GHSA-h6r4-xvw6-jc5h","https://nvd.nist.gov/vuln/detail/CVE-2023-49781","https://github.com/nocodb/nocodb/commit/7f58ce3726dfec71537d8b80474a0f95a48a1574","https://github.com/nocodb/nocodb"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-h6r4-xvw6-jc5h","url":"https://osv.dev/vulnerability/GHSA-h6r4-xvw6-jc5h"}],"summary":"NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue"}