Skip to content
OpenAdvisories

Package · npm

@nocobase/plugin-action-custom-request

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.3
    CVE-2026-79914

    NocoBase: SSRF in customRequests:send via runtime options.url override

    NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Versions 2.1.0 through 2.1.14 contain a server-side request forgery vulnerability in the customRequests:send endpoint. A low-privileged authentica…

    nocobase nocobase @nocobase/plugin-action-custom-request npm