Summary
NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
References
Related vulnerabilities
All Supply chain →- MEDIUMGHSA-MX8G-39Q3-5C79
webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies
- HIGHGHSA-JRFP-M64G-PCWV
Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects
- HIGHGHSA-R2WG-2MCR-66RV
Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
- HIGHGHSA-226F-F24G-524W
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)
- MEDIUMGHSA-H6VV-PCQ8-7XM4
NocoDB: Server-Side Request Forgery via Base Migration URL
- MEDIUMGHSA-GPRH-27J3-G5H4
NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL