path traversal in nocodb (CVE-2026-47385). Risk of unauthorized operations or information disclosure. Exploitable via ``fs.exists``. Mitigation: upgrade to `2026.05.1` or later.
SQL injection in nocodb (CVE-2026-47384). Risk of unauthorized operations or information disclosure. Exploitable via ``column_name``. Mitigation: upgrade to `2026.05.1` or later.