Skip to content
OpenAdvisories

Package · npm

@nocobase/auth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.6
    CVE-2025-13877

    nocobase JWT Service jwt-service.ts hard-coded key

    A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37. The affected element is an unknown function of the file nocobase\packages\core\auth\src\base\jwt-service.ts of the component JWT Service. The manipulation of the argument API_KEY results in …

    @nocobase/auth npm