CVE-2026-112306 - NocoBase plugin-collection-sql through 2.2.28 SQL Injection via sqlCollection:setFields
CVE ID :CVE-2026-112306 Published : Oct. 19, 2026, 4:17 p.m. | 1 hour, 48 minutes ago Description :NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL() through the...