All 6 CVE vulnerabilities found in Baserow, with AI-generated Chinese analysis, references, and POCs.
Vendor: Baserow B.V.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-19754 | Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction CWE-89 | 8.6 | High | 2026-09-02 |
| CVE-2026-81335 | Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources CWE-862 | 7.5 | High | 2026-08-27 |
| CVE-2026-76837 | Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name CWE-79 | 6.4 | Medium | 2026-08-24 |
| CVE-2026-18817 | Baserow Inactive Non-Staff User serializers.py BaserowImpersonateAuthTokenSerializer improper authorization CWE-285 | 2.2 | Low | 2026-08-04 |
| CVE-2026-18816 | Baserow 2FA Verify Endpoint views.py verify improper authentication CWE-287 | 5.0 | Medium | 2026-08-04 |
| CVE-2021-22255 | Baserow 代码问题漏洞 | 7.7 | High | 2021-08-20 |
All 6 known CVE vulnerabilities affecting Baserow with full Chinese analysis, references, and POCs where available.