Skip to content
OpenAdvisories

Vendor

nocobase

14 known vulnerabilities.

Products

nocobase 12 @nocobase/plugin-workflow-request 1 plugin-workflow-javascript 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2026-125397

    NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee() tha…

    nocobase nocobase
  • High 7.2
    CVE-2026-112306

    NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields

    NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL() through the sqlCollection:setFields action. Attackers holding the collection-sql snip…

    nocobase nocobase
  • High 7.2
    CVE-2026-41641 Scanner template

    NocoBase Vulnerable to SQL Validation Bypass via `sqlCollection:update` Missing `checkSQL` Call

    NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the checkSQL() validation function that blocks dangerous SQL keywords (e.g., pg_read_file, LOAD_FILE, dblink) is applied …

    nocobase nocobase @nocobase/plugin-collection-sql npm
  • High 7.5
    CVE-2026-41640 Scanner template

    NocoBase Vulnerable to SQL Injection via String Concatenation in Recursive Eager Loading

    NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the queryParentSQL() function in the core database package constructs a recursive CTE query by joining nodeIds with strin…

    nocobase nocobase @nocobase/database npm
  • High 7.3
    CVE-2026-6224

    nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox

    A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js. Performing a manipulation results in…

    nocobase plugin-workflow-javascript
  • High 8.5
    CVE-2026-34825

    NocoBase Has SQL Injection via template variable substitution in workflow SQL node

    NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.30, NocoBase plugin-workflow-sql substitutes template variables directly into raw SQL strings via getParsedValue() without pa…

    nocobase nocobase @nocobase/plugin-workflow-sql npm