Baserow Baserow
4 CVEs affecting Baserow Baserow. Latest disclosed: 2026-09-02. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22255 | High | 7.7 | 2021-08-20 | SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting a… |
CVE-2026-81335 | High | 7.5 | 2026-08-27 | Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/b… |
CVE-2026-76837 | Medium | 6.4 | 2026-08-24 | Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the first_name value verbat… |
CVE-2026-19754 | | 2026-09-02 | Baserow 2.3.3 contains a SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify formula fiel… |