Skip to content

Product

nocobase @nocobase/plugin-backups vulnerabilities

1 published CVE affecting nocobase @nocobase/plugin-backups, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest nocobase @nocobase/plugin-backups CVEs

Newest publication first

  1. CVE-2026-55410 NocoBase backup restore schema name allows command injection

    Published
    MediumCVSS 6.7 EPSS 0.72%

    NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to 2.1.19, NocoBase @nocobase/plugin-backups restored PostgreSQL backups by interpolating the database.schema value from _metadata.json into shell command string...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.