Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how budibase compares to other vendors in security performance

View Risk Score →

budibase BudibaseBudibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect

Risk 40
Severity
8.2
First published (updated )
CVE-2026-67311

npm/@budibase/serverBudibase: Anonymous NoSQL operator injection via published-app query templates

Risk 73
Severity
10
First published (updated )
CVE-2026-54350

npm/@budibase/backend-coreBudibase: Potential SSRF DNS rebinding bypass in outbound fetch validation

Risk 55
Severity
8.5
First published (updated )
CVE-2026-54353

npm/@budibase/serverBudibase: Arbitrary file read by workspace-builder via PWA-zip symlink upload

Risk 68
Severity
9.6
First published (updated )
CVE-2026-54352

npm/@budibase/serverBudibase: Mass Assignment in Webhook Trigger Allows Cross-Workspace Automation Execution via appId Override

Risk 68
Severity
9.6
First published (updated )
CVE-2026-54351
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

npm/@budibase/serverBudibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials

Risk 76
Severity
8.2
First published (updated )
CVE-2026-50137

npm/@budibase/serverBudibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials

Risk 52
Severity
7.4
First published (updated )
CVE-2026-50136

npm/@budibase/serverBudibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in Budibase

Risk 54
Severity
7.3
First published (updated )
CVE-2026-50132

budibase Budibase WorkerBudibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Worker

Risk 37
Severity
6.5
First published (updated )
CVE-2026-48147

budibase BudibaseBudibase: Unvalidated VectorDB Host Parameter Enables SSRF

Risk 26
Severity
5.3
First published (updated )
CVE-2026-48148
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

budibase BudibaseBudibase: SCIM endpoints lack role-based authorization, BASIC users CRUD tenant users

Risk 82
Severity
9.9
First published (updated )
CVE-2026-46425

budibase BudibaseBudibase: Snowflake private key returned unmasked from datasource API to BASIC users

Risk 44
Severity
7.7
First published (updated )
CVE-2026-46427

budibase BudibaseBudibase: SSRF via User-Controlled queryId in Automation Execute Query Step

Risk 23
Severity
5.1
First published (updated )
CVE-2026-48128

budibase BudibaseBudibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist Protection

Risk 44
Severity
7.7
First published (updated )
CVE-2026-48146

budibase Budibase Text component (MarkdownViewer)Budibase: Stored XSS in Text component: BASIC users execute JS in admin session via MarkdownViewer innerHTML + CDN+srcdoc CSP bypass

Risk 60
Severity
8.1
First published (updated )
CVE-2026-48149
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

budibase BudibaseBudibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign

Risk 68
Severity
9
First published (updated )
CVE-2026-48150

budibase BudibaseBudibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schema

Risk 43
Severity
7.5
First published (updated )
CVE-2026-48151

budibase BudibaseBudibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL

Risk 60
Severity
8.1
First published (updated )
CVE-2026-48152

budibase BudibaseBudibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata

Risk 55
Severity
8.5
First published (updated )
CVE-2026-48153

budibase BudibaseBudibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeover

Risk 54
Severity
8.1
First published (updated )
CVE-2026-42239
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

budibase BudibaseBudibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints

Risk 66
Severity
9.1
First published (updated )
CVE-2026-41428

budibase BudibaseBudibase: Stored XSS via unsanitized entity names rendered with {@html} in Builder Command Palette

Risk 61
Severity
8.7
First published (updated )
CVE-2026-35218

npm/@budibase/serverBudibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step

Risk 78
Severity
9.1
First published (updated )
CVE-2026-35216

npm/@budibase/serverBudibase: Path traversal in plugin file upload enables arbitrary directory deletion and file write

Risk 59
Severity
8.7
First published (updated )
CVE-2026-35214

npm/@budibase/backend-coreBudibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist

Risk 78
Severity
9.9
First published (updated )
CVE-2026-31818
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

npm/@budibase/serverBudibase: Command Injection in Bash Automation Step

Risk 79
Severity
8.7
First published (updated )
CVE-2026-25044

budibase BudibaseBudibase: Unauthenticated Password Reset Endpoint Lacks Rate Limiting, Enabling Email Flooding

Risk 43
Severity
7.5
First published (updated )
CVE-2026-25043

npm/budibaseBudibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview

Risk 44
Severity
8.7
EPSS
0.01%
First published (updated )
CVE-2026-33226

npm/budibaseBudibase Universal Auth Bypass via Webhook Query Param Injection

Risk 47
Severity
9.1
EPSS
0.15%
First published (updated )
CVE-2026-31816

BudibaseBudibase PWA ZIP Upload Path Traversal Allows Reading Arbitrary Server Files Including All Environment Secrets

Risk 49
Severity
9.6
EPSS
0.03%
First published (updated )
CVE-2026-30240
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203