@nocobase/plugin-notification-in-app-message vulnerabilities (npm)

1 vulnerability.

• @nocobase/plugin-notification-in-app-message npm NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE CVE-2026-52887 Public exploitFix available 10.0 CriticalJuly 15, 2026