@nocobase/plugin-collection-sql vulnerabilities (npm)

2 vulnerabilities.

• @nocobase/plugin-collection-sql npm NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass CVE-2026-52888 Fix available 6.8 MediumJuly 15, 2026
• @nocobase/plugin-collection-sql npm NocoBase Vulnerable to SQL Validation Bypass via `sqlCollection:update` Missing `checkSQL` Call CVE-2026-41641 Fix available 7.2 HighApril 22, 2026