CVE-2026-47380 — NocoDB: User Enumeration via Sign-In Timing
NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-use…
Published: 2026-06-23 · CVSS: 6.3 · CVSS 4.0
NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-user branch returned without performing a password hash comparison. This vulnerability is fixed in 2026.04.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7