Skip to content
Baserow
Products
| Product | CVEs | Exploited | Latest |
| Baserow | 4 | – | Oct 20, 2026 |
Exploited and recent CVEs
-
CVE-2026-113359
Medium 4.3
Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint
0.3%
-
CVE-2026-19754
High 8.6
Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction
0.4%
-
CVE-2026-81335
High 7.5
Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources
0.6%
-
CVE-2026-76837
Medium 6.4
Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name
0.3%