nocobase — Vulnerabilities & Security Advisories 12

Nocobase is an open-source low-code platform enabling application development and workflow automation through visual interfaces. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, as evidenced by its six recorded CVEs. These vulnerabilities often stem from improper input validation and insufficient access controls in its API endpoints and frontend components. While no major public security incidents have been widely reported, the consistent pattern of critical vulnerabilities in its CVE history suggests potential risks for organizations deploying Nocobase without rigorous hardening and regular security updates.