Vulnerabilities in budibase
91 resultsCVE-2026-72859HIGHBudibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URLEPSS 0.2%CVE-2026-82246HIGHBudibase Server before 3.41.3 SSRF via Query ImportEPSS 0.2%CVE-2026-48146HIGHBudibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist ProtectionEPSS 0.2%CVE-2026-54353HIGHBudibase: Potential SSRF DNS rebinding bypass in outbound fetch validationEPSS 0.2%CVE-2026-50132HIGHBudibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in BudibaseEPSS 0.2%CVE-2026-46426HIGHBudibase: Unrestricted Upload of File with Dangerous TypeEPSS 0.2%CVE-2026-48153HIGHBudibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadataEPSS 0.2%CVE-2026-46424MEDIUMBudibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 HourEPSS 0.2%CVE-2026-72849HIGHBudibase before 3.40.0 Identity Confusion via Chat-Link Handoff CSRFEPSS 0.2%CVE-2026-45718MEDIUMBudibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope RowsEPSS 0.1%CVE-2026-48147MEDIUMBudibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase WorkerEPSS 0.1%