CRM

nocobase/nocobase

NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything from scratch, AI works on top of production-proven infrastructure and a WYSIWYG no-code interface, so you get both speed and reliability.

#no-code#low-code#nocode#internal-tools#internal-tool#airtable#admin-dashboard#crud#workflows#self-hosted#crm#salesforce#project-management#erp#lowcode#ai-agent#ai-agents#ai-assistant#ai-tools

スコア

/ 100

Star

22,407

Fork

2,607

Open Issue

130

サイズ

297MB

言語

TypeScript ★

最終push

0 日前

Docker

🐳 両方 ★

採点内訳

過去CVE 6件 (適量)

✓

直近 push: 0 日前

✓

得意言語 (TypeScript)

✓

オープンissue 130件

✓

大規模 (297MB)

—

Docker 対応 (Dockerfile + compose)

✓

10k–50k: 中級 (★22,407)

—

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (6 件)

HIGHGHSA-4948-f92q-f432 CVE-2026-416402026/4/18
SQL Injection via String Concatenation in Recursive Eager Loading
HIGHGHSA-wrwh-c28m-9jjh CVE-2026-416412026/4/18
SQL Injection and Validation Bypass via `sqlCollection:update` Missing `checkSQL` Call
HIGHGHSA-mvvv-v22x-xqwp CVE-2026-403462026/4/14
SSRF in Workflow HTTP Request and Custom Request Plugins (CWE-918)
HIGHGHSA-vx58-fwwq-5g8j CVE-2026-348252026/4/1
SQL injection via template variable substitution in workflow SQL node
CRITICALGHSA-px3p-vgh9-m57c CVE-2026-341562026/3/28
VM Sandbox Escape to Remote Code Execution via console._stdout Prototype Chain Traversal in Workflow Script Node
MEDIUMGHSA-mv7p-34fv-4874 CVE-2025-138772025/12/9
Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments