nodebb Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by nodebb
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
ActivityPub Author Spoofing in NodeBB by a Remote Actor
CVE-2026-58593NodebbNodebb👾🟡8.7HIGHArbitrary File Write Vulnerability in NodeBB Plugin Emoji by NodeBB
CVE-2021-47746NodebbNodebb Plugin Emoji👾🟡8.6HIGHSQL Injection Vulnerability in NodeBB by NodeBB Inc.
CVE-2025-50979NodeBB Inc.NodeBB8.6HIGHNodeBB Pre-Authentication Denial-of-Service
CVE-2023-30591Nodebb, Inc.NodebbEPSS 53%7.5HIGHRemote Code Execution Vulnerability in NodeBB Forum Software by NodeBB Inc
CVE-2023-43187NodebbNodebbEPSS 45%9.8CRITICALNodeBB vulnerable to path traversal and code execution via prototype vulnerability
CVE-2023-26045NodebbNodebb10CRITICALAccount takeover via prototype vulnerability
CVE-2022-46164NodebbNodebb👾🟡EPSS 48%9.4CRITICALAccount takeover via SSO plugins in NodeBB
CVE-2022-36076NodebbNodebb8.8HIGHAccount takeover via cryptographically weak PRNG in NodeBB Forum
CVE-2022-36045NodebbNodebb9CRITICALAPI token verification can be bypassed
CVE-2021-43786NodebbNodebb9.8CRITICALXSS via prototype pollution
CVE-2021-43787NodebbNodebb9CRITICALAccount takeover in NodeBB
CVE-2020-15149NodebbNodebb9.9CRITICAL