NodeBB vulnerabilities

CVEs whose affected-version data names the NodeBB package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120007Medium· 6.5

1w ago

NodeBB 1.18.0 through 4.16.5 Authorization Bypass via /register/complete uid

NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/comp…

▾ SunlitNodeBB · NodeBBEPSS 0.34%via CVEORG