Threats affecting pkg:github/czx1111/nocobase

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-88402nocobase · CVE-2026-88402 is a critical SQL injection Critical9.8EPSS 0.5%2026-09-21CVE Database V5CVE-2026-88402 CVE-2026-88402 is a critical SQL injection vulnerability in the checkSQL function of nocobase version 2.1.21. This flaw allows attackers to inject crafted SQL statements, potentially exposing sensitive database information and impacting confidentiality, integrity, and availability. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2026-09-21
Medium	6.5	EPSS 0.4%	CVE-2026-88403nocobase · SSRF Medium6.5EPSS 0.4%2026-09-21CVE Database V5CVE-2026-88403 CVE-2026-88403 is a Server-Side Request Forgery (SSRF) vulnerability in the serverRequest function of nocobase version prior to 2.1.21. It allows authenticated attackers to scan internal resources by sending crafted HTTP requests. The vulnerability has a medium severity with a CVSS score of 6.5. No official patch or fix information is provided in the available data. EPSS 0.4%Vulnerability CWE-918	CVE Database V5	2026-09-21

Page 1 of 1 · 2 duplicate CVE records merged