Known Vulnerabilities for App Builder by Adalo No-Code App Builder
Listed below are 10 of the newest known vulnerabilities associated with "App Builder" by "Adalo No-Code App Builder".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100687 json | Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table updates to ... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100686 json | Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint,... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100685 json | Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, allowing builders to enumerate ... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100684 json | Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login path of @budibase/server. In ss... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100683 json | Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlTable.... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100682 json | Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts us... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100680 json | Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, a... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100625 json | Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/upload.ts) that authorize... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100624 json | Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy endpo... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-95866 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | Not Provided | 2026-09-25 | 2026-09-25 |