Baserow vulnerabilities
We track 2 vulnerabilities in Baserow products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Baserow vulnerabilities
- 8.6 High severity
Baserow: Improper Neutralization of Special Elements used in an SQL Command
Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged authenticated user who can create or modify Formula fields can provide an undocumented fourth argument that is treated as a SQL templa
- 7.5 High severity
Baserow: Missing Authorization
Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/data_sources/views.py are declared with a permission class that admits any