Known Vulnerabilities for Budibase by Budibase
Listed below are 9 of the newest known vulnerabilities associated with "Budibase" by "Budibase".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-48153 json | Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplie... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48152 json | Budibase is an open-source low-code platform. Prior to 3.39.0, the single-datasource GET and PUT routes are guarded by generi... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48151 json | Budibase is an open-source low-code platform. Prior to 3.39.0, the webhook schema-building endpoint is registered under build... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2026-48150 json | Budibase is an open-source low-code platform. Prior to 3.39.0, /api/public/v1/roles/assign is guarded by the builderOrAdmin m... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48149 json | Budibase is an open-source low-code platform. Prior to 3.39.0, the Budibase Text component renders markdown by assigning mark... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2026-48148 json | Budibase is an open-source low-code platform. Prior to 3.35.3, the VectorDB configuration endpoint in Budibase accepts a hos... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48147 json | Budibase is an open-source low-code platform. Prior to 3.35.4, the buildMatcherRegex() / matches() functions in packages/back... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48146 json | Budibase is an open-source low-code platform. Prior to 3.39.0, the OAuth2 token fetch function in packages/server/src/sdk/wor... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2026-48128 json | Budibase is an open-source low-code platform. Prior to 3.39.0, the executeQuery automation step in Budibase accepts a queryId... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-46427 json | Budibase is an open-source low-code platform. Prior to 3.38.3, removeSecrets at packages/server/src/sdk/workspace/datasources... | Not Provided | 2026-05-27 | 2026-05-28 |