CVE-2026-6224

A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js. Performing a manipulation results in sandbox issue. The attack can be...

CVE-2026-6224

CVE-2026-6224 affects nocobase plugin-workflow-javascript up to version 2.0.23. The vulnerability is in the function createSafeConsole inside packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js, where certain manipulation leads to a sandbox issue. The issue is exploitable remot...