CRITICAL10.0npm
GHSA-p849-8hwh-84j9· CVE-2026-52887NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE
Modified: 7/31/2026
package
pkg:npm/%40nocobase/plugin-notification-in-app-message
NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE
Modified: 7/31/2026