High
CVE-2026-54356
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 42
Reset filters
High
CVE-2026-35219
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
Medium
CVE-2026-73307
Budibase: SSRF via bare fetch() in uploadUrl during AI table generation
High
CVE-2026-73410
Budibase: SSRF via DNS rebinding in the REST datasource integration
High
CVE-2026-73617
Budibase: NoSQL injection in MongoDB integration: collection dump, $where JS exec, cross-collection pivot, arbitrary update/delete
Medium
CVE-2026-73306
Budibase: Account Enumeration via Login Lockout Response Differential
High
CVE-2026-72849
Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)
High
CVE-2026-73408
Budibase: MySQL DESCRIBE Backtick Injection via multipleStatements in Database Connector
High
CVE-2026-73618
Budibase: NoSQL Injection via JSON Parameter Interpolation in MongoDB Query Execution
Medium
CVE-2026-73308
Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders
High
CVE-2026-73406
Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint
Critical
CVE-2026-73407
Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak
Critical
CVE-2026-73302
Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified
High
CVE-2026-72855
Budibase: DNS rebinding SSRF bypasses remain in OpenAPI import and REST query execution
High
CVE-2026-72859
Budibase: S3 presigned URL endpoint authorization regression in v3.39.4 allows BASIC users to obtain S3 PutObject presigned URLs
High
CVE-2026-73409
Budibase: Server Filesystem Existence/Read Oracle via Builder-Controlled MongoDB tlsCertificateKeyFile
Critical
CVE-2026-73300
Budibase: SQL Injection via `multipleStatements: true`
High
CVE-2026-73303
Budibase: Email Change IDOR via POST /api/v2/email allows full Account Takeover (accountId not validated against session)
Medium
CVE-2026-73304
Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users
Medium
CVE-2026-73301
Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings
High
CVE-2026-73305
Budibase: Privilege escalation via public role assignment API missing app-level authorization
Critical
CVE-2026-54350
Budibase has nonymous NoSQL operator injection via published-app query templates
Critical
CVE-2026-54352
Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload
High
CVE-2026-54351
Budibase: Mass Assignment in Webhook Trigger Allows Cross-Workspace Automation Execution via appId Override
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.