- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 high, 1 medium
- Weekly downloads
- 5,417
- Dependents
- 0
- Registry
- npm
Advisories 2
- CVE-2026-52888Medium 6.8
NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass
Affected: fixed in 2.0.62; from 2.1.0-alpha.1, fixed in 2.1.0-alpha.46; from 2.1.0-beta.1, fixed in 2.1.0-beta.45.
- CVE-2026-41641High 7.2
NocoBase Vulnerable to SQL Validation Bypass via `sqlCollection:update` Missing `checkSQL` Call
Affected: fixed in 2.0.39.