Baserow vulnerabilities
CVEs whose affected-version data names the Baserow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-113359Medium· 4.3Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint
Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint. Attackers can enumerate sequential field IDs to ret…
▾ SunlitBaserow · BaserowEPSS 0.34%via CVEORG
CVE-2026-19754High· 8.6PoCBaserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction
Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fields can provide an undocumented fourth argument that is …
▾ MidnightBaserow · BaserowEPSS 0.39%via CVEORG