What’s Vulnerable › Products

Baserow vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Baserow version is affected

Latest Baserow vulnerabilities

• CVE-2026-113359 — Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint (CVSS 4.3)
• CVE-2026-19754 — Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction (CVSS 8.6)
• CVE-2026-81335 — Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources (CVSS 7.5)
• CVE-2026-76837 — Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name (CVSS 6.4)
• CVE-2021-22255 — (CVSS 6.5)