Skip to content
OpenAdvisories

Product · nocobase

plugin-workflow-javascript

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-6224

    nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox

    A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js. Performing a manipulation results in…

    nocobase plugin-workflow-javascript