Baserow

Products

ProductCVEsExploitedLatest
Baserow4–Oct 20, 2026

Exploited and recent CVEs

  • CVE-2026-113359 Medium 4.3 Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint 0.3%
  • CVE-2026-19754 High 8.6 Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction 0.4%
  • CVE-2026-81335 High 7.5 Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources 0.6%
  • CVE-2026-76837 Medium 6.4 Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name 0.3%