NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared-view password check fell back to strict-equality (===) comparison for legacy plaintext passwords, leaking the password's length and per-character prefix through response timing. This vulnerability is fixed in 2026.05.1.
NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared-view password check fell back to strict-equality (===) comparison for legacy plaintext passwords, leaking the password's length and per-character prefix through response timing. This vulnerability is fixed in 2026.05.1.
为什么是这个 VPI(可解释·实验性)
VPI 计算依据
| 影响度 | 69.00 |
| 利用信号(无额外利用信号) | ×1.00 |
| VPI | 69.00 |
VPI 公式 vpi-v1