https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-02T08:39:27.070418+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-119715 fkie_cve-2026-119715 2026-11-02T08:39:27.246953+00:00

NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interface because no X-Frame-Options or CSP frame-ancestors headers are sent. Attackers can overlay a signed-in user's session from a malicious page, tricking clicks that modify or delete records, change sharing settings, or invite collaborators.

 https://db.gcve.eu/vuln/ghsa-2jgj-7q9p-vq8v GHSA-2jgj-7q9p-vq8v 2026-11-02T08:39:27.247055+00:00

NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interface because no X-Frame-Options or CSP frame-ancestors headers are sent. Attackers can overlay a signed-in user's session from a malicious page, tricking clicks that modify or delete records, change sharing settings, or invite collaborators.