Read the docs

Nozbe

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Nozbe records in CISA KEV

No Nozbe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Watermelondb 1 record LOW

Records

2 records

TI-2020-03525 CVE-2020-4035 · GHSA-38f9-m297-6q9g

DoS or local data modification via malicious record IDs in WatermelonDB

Priority LOW 28

In WatermelonDB (NPM package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete a…

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00763 Published 2020-06-03 Fixed in 0.15.1, 0.16.2 CWE-89
TI-2025-33706 CVE-2025-53813 · GHSA-r4cg-2rhj-cv67

TCC Bypass via misconfigured Node fuses in Nozbe

Priority LOW 21

The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Nozbe TCC (Transparency, Consent, and Control) perm…

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0013 Published 2025-08-26 Fixed in 2025.11 CWE-276
Open these records in search →