Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@nocobase/plugin-workflow-javascript
@nocobase/plugin-workflow-javascript vulnerabilities (npm)
1 vulnerability.
@nocobase/plugin-workflow-javascript
npm
NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node
CVE-2026-34156
Public exploit
Fix available
EPSS 35.0%
10.0
Critical
March 30, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open