NocoDB | 2026.06.2

NocoDB 2026.06.2 released on 29-06-2026


NocoDB 2026.06.2 is out now. Enterprise customers can attach Oracle databases as a connectable external data source, and the release also brings a range of UI, security and self‑hosting improvements that matter to operators and self‑hosters.

Find the full release on NocoDB’s GitHub or read the official docs; Enterprise customers wanting Oracle support should contact support@nocodb.com to enable the add‑on.

What’s in this release

  • Oracle Database support (Enterprise add‑on): connect existing Oracle databases and use grids, views, fields, formulas, links, lookups, aggregations and charts against Oracle tables.
  • UI and views improvements: calendar cards support Compact/Expanded heights and hide weekends, Percent fields can render as circular progress, Lookup fields gain independent formatting, sorting supports toggling and drag‑reordering, Gantt adds milestone guide lines and clickable URL formulas, Page Designer gains custom page sizes and named designs, public forms autosave in respondents’ browsers, and exports include all linked records.
  • Security and operational hardening: OAuth refresh‑token rotation tightened, access tokens no longer usable as session tokens, external DB host validation to block SSRF/internal‑network access, caps on webhook/image/formula sizes to prevent worker crashes, and a stored XSS fix in AI prompt tooltips.

Upgrade notes

  • Oracle support is an Enterprise add‑on; Enterprise customers must contact support@nocodb.com to enable it and should plan any licence or enablement steps before upgrading.
  • Self‑hosted operators should review the rebuilt Helm chart and new environment variables (NC_WEBHOOK_MAX_BODY_SIZE, NC_THUMBNAIL_MAX_INPUT_PIXELS, NC_THUMBNAIL_MAX_INPUT_PIXELS_SHRINKABLE, NC_FORMULA_MAX_OUTPUT_LENGTH). External database host validation may block connections to internal addresses—test connections after upgrading.

Share your experience after upgrading or report issues on the project’s GitHub so others know how the new Oracle and self‑hosting changes behave in the wild.

Related posts

Weekly Tech Digest | 12 Oct 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

Removed SSRF beta detections in Cloudflare WAF

Cloudflare WAF Managed Rules have a habit of changing underneath you, and old SSRF names can linger long after the protection has gone. I prefer to check the live block logs, then test the ugly...

Weekly Tech Digest | 28 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.