Vulnerabilities

TI-2026-30160 CVE-2026-41641 · GHSA-wrwh-c28m-9jjh

NocoBase Vulnerable to SQL Validation Bypass via `sqlCollection:update` Missing `checkSQL` Call

HIGH 67

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01833 Published 2026-05-07 Fixed in 2.0.39 CWE-284

TI-2026-30159 CVE-2026-41640 · GHSA-4948-f92q-f432

HIGH 73

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01875 Published 2026-05-07 Fixed in 2.0.39 CWE-89

TI-2026-29121 CVE-2026-40346 · GHSA-mvvv-v22x-xqwp

MEDIUM 62

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.

CVSS 4.0MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00384 Published 2026-04-17 Fixed in 2.0.37 CWE-918

TI-2026-27069 CVE-2026-34825 · GHSA-vx58-fwwq-5g8j

HIGH 78

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00413 Published 2026-04-02 Fixed in 2.0.30 CWE-89

TI-2026-26457 CVE-2026-34156 · GHSA-px3p-vgh9-m57c

HIGH 82

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.34966 Published 2026-03-31 Fixed in 2.0.28 CWE-913