Known Vulnerabilities for Budibase by Budibase
Listed below are 10 of the newest known vulnerabilities associated with "Budibase" by "Budibase".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73618 json | Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-sup... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-73617 json | Budibase before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB datasource integration where user-supplied par... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-73410 json | Budibase is an open-source low-code platform. Prior to 3.40.0, packages/backend-core/src/utils/outboundFetch.ts pinned a vali... | Not Provided | 2026-08-17 | 2026-08-17 |
| CVE-2026-73409 json | Budibase is an open-source low-code platform. Prior to 3.40.1, packages/server/src/integrations/mongodb.ts passed builder-con... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-73408 json | Budibase is an open-source low-code platform. Prior to 3.39.18, packages/server/src/integrations/mysql.ts enabled multipleSta... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-73407 json | Budibase is an open-source low-code platform. Prior to 3.40.1, RestIntegration._req in packages/server/src/integrations/rest.... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-73406 json | Budibase is an open-source low-code platform. Prior to 3.39.32, GET /api/global/users/tenant/:id was listed in PUBLIC_ENDPOIN... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-73308 json | Budibase is an open-source low-code platform. Prior to 3.39.25, packages/server/src/api/controllers/automation.ts returned au... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-73307 json | Budibase is an open-source low-code platform. Prior to 3.39.4, uploadUrl in packages/server/src/utilities/fileUtils.ts used a... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-73306 json | Budibase is an open-source low-code platform. Prior to 3.39.25, POST /api/global/auth/:tenantId/login incremented the failure... | Not Provided | 2026-08-12 | 2026-08-13 |